Protect
Vault: Your passwords, sign-in codes and notes, readable only on your devices
Vault is the password manager and authenticator in Viremail, encrypted end to end with keys only your devices hold.
What you get
Locked on your device
Every item is encrypted in your browser with its own key, and the Vault is locked with the keys of your encrypted chats. Our servers keep it but cannot read it, not even which websites are in it.
An authenticator built in
Keep two-step sign-in codes next to your passwords: type the secret or paste the setup link, and the code shows with a ring that counts down.
Checks what it gets back
Your devices keep a sealed list of every item and each change, so an item that goes missing or an older copy of your Vault is spotted and flagged.
Locks by itself
The Vault locks after 15 minutes without use (you choose), when you lock encryption or sign out, and copied passwords clear after 30 seconds.
Strong passwords in one click
Make random passwords of 8 to 128 characters, or passphrases of 3 to 10 words, in your browser.
Move in from anywhere
Scan the export codes from Google Authenticator, or bring in a password file from Chrome, Edge, Brave, Firefox, Safari, Bitwarden, 1Password or LastPass. It is read on your device, with duplicates merged and a preview first.
Password health
See which passwords are weak, reused or in a known data breach, and which logins have no sign-in code. The breach check sends only the first 5 characters of a hash.
Take it with you
Export an encrypted copy locked with a passphrase of 6 random words, or a plain file for another password manager after a password check and a clear warning.
Questions and answers
Can Viremail see my passwords?
No. They are encrypted on your device before they are saved, with keys only your devices hold. We can see how many items you have, their approximate sizes and when they changed. Like all encryption that runs in a web page, it relies on the app we serve you, and the help page on how the Vault keeps things safe sets out that limit.
Who can use the Vault?
Anyone who can set up keys for encrypted chats, since the Vault uses the same keys. Settings, Encryption says whether they are open for your account.
Can I keep my Viremail sign-in code in the Vault?
No. Keep it in an authenticator on another device, so it stays a second step.
Can I move my codes from Google Authenticator?
Yes. Choose Transfer accounts, then Export accounts in the app, and scan the codes it shows with the Vault, or upload screenshots of them. They are read on your device.
Does the breach check send my passwords anywhere?
No. Your browser sends only the first 5 characters of each password’s SHA-1 hash, and compares the rest itself. We pass those 5 characters to Have I Been Pwned and never log them.