Vault: passwords, sign-in codes and notesNew

The Vault keeps your passwords, the codes for two-step sign-in and private notes. Everything in it is locked on your device before it's saved, with the same keys as your encrypted chats, so only your devices can open it.

Open your Vault

1. Open Vault from the side of the app.
2. If you haven't set up encryption yet, choose Set up encryption and save the recovery key you get. If this browser isn't unlocked yet, choose Unlock encryption and use your passkey, your recovery key or another device.
3. Prove it's you: use your passkey, type your account password, or type your recovery key. The first time, this makes your Vault.

Add things

Choose Add an item, then:

• Login: a name, a username, a password and the websites it's for. Add extra fields (a PIN, say), notes, and a sign-in code if the site uses two-step sign-in.
• Authenticator: a two-step code on its own. Type the secret key the site shows next to its QR code, or paste the otpauth:// setup link some sites show. Codes change every 30 seconds, and the ring around the code shows how long is left (it turns red in the last 5 seconds).
• Note: any text you want to keep private, such as a wifi password or a door code.

Use the wand next to a password to make a password: random characters (8 to 128) or a few random words, made in your browser.

Use it

• Passwords show as dots until you choose the eye. They hide again after 20 seconds, or when you switch to another window.
• Choose the copy button to copy a username, password or code. Copied passwords and codes are cleared after 30 seconds (see the limits below).
• When you change a password, the old one is kept under Password history (the last 10).
• Mark items as Favourites, sort them into Folders, and use the search box to find them.
• Delete moves an item to the Trash, where it waits for 30 days before it's deleted for good. You can restore it until then.

Settings

Open Vault settings to choose:

• Lock after no activity for 1, 5, 15 (the default) or 60 minutes. On a shared or public device it locks after 5 minutes at most.
• Clear copied passwords and codes after 15, 30 (the default) or 90 seconds, or not at all.
• Ask for a passkey or my recovery key every time, so your password alone won't open the Vault.

Your settings are saved inside your Vault, so every device uses them.

Keyboard shortcuts

• / to search.
• Cmd or Ctrl plus C to copy the password of the item you have open (or its code, for an authenticator).
• Cmd or Ctrl plus Shift plus C to copy the username.
• Cmd or Ctrl plus Shift plus O to copy the sign-in code.
• L to lock the Vault.

Health

Open Health in the Vault to see which passwords are weak, which are used on more than one login, and which logins have no sign-in code yet. Choose Check passwords to look for them in known data breaches (see How the Vault keeps things safe for what that sends). Open any login from there to change it; the generator makes a strong new one.

To bring in passwords and codes from another app, or take a copy with you, read Import into and export from your Vault. Read How the Vault keeps things safe for what it protects and its limits.