PASSWORD

Opening your vault…

A quiet place for your digital keys.

Master passphrase Confirm passphrase

Your vault is encrypted on this device before it is saved.

LIBRARY

Encrypted on your device

YOUR VAULT

All items

Up to date

Everything in its place.

Select an item, or add your first password.

VAULT ITEM

New item

TitleType

Username or email Password or secret

Websites one per line Tags comma separated Notes Authenticator secret or otpauth URL Or import an authenticator QR image

Custom fields

Add to favorites

MAKE SOMETHING STRONG

Password generator

Style

Length

A–Z a–z 0–9 Symbols

Generated values are saved in your encrypted history, including when you copy them during a signup.

Generation history

MAKE IT YOURS

Settings

Appearance & locking

ThemeLock after inactivity

Recovery

Keep your kit separate from your devices. It grants access to your vault. Recovery cannot erase previously downloaded backups.

Passkeys

Use your device or security key to sign in. Compatible passkeys can also unlock the vault.

Offline access

Keep an encrypted copy on this device

Unlock your saved copy with the master passphrase when disconnected. Offline access is read-only.

Devices & sessions

Name your sessions and revoke access from a lost device. A downloaded copy cannot be remotely erased.

Browser autofill

Install the extension, then connect it using a device token. Filling requires you to choose a matching login.

Chrome / Edge / Brave Firefox

Unzip the download and load the extension through your browser’s developer extension page. Firefox uses temporary installation until signed distribution is configured.

Import & backup

Import Chrome CSV or Bitwarden CSV/JSON. Encrypted backups can be restored without the original server.

New master passphrase

Your saved passwords stay the same. This also creates a new recovery kit and signs out other sessions.

New passphraseConfirm passphrase Remove enrolled passkeys too

Recover your vault

Load your saved recovery kit, then choose a new master passphrase. Enrolled passkeys will be removed.

Recovery kit fileOr paste the complete kitNew master passphraseConfirm passphrase

Your recovery kit

Save this somewhere safe outside your vault. Anyone holding this kit can access your passwords.

Save an updated backup with a replacement kit. Older backups still need their matching old passphrase or kit.

Verify a saved kit

Import or restore

Export or encrypted backupBackup's master passphrase only for encrypted backupsOr load its recovery kit

New vault's master passphraseConfirm new passphrase

Keep exact duplicates

Confirm

Password health

Local checks flag reused, short, and common-pattern passwords. These checks cannot guarantee password strength.

Optional: sends only the first five characters of each password’s SHA-1 hash to Have I Been Pwned, with padded responses. Passwords and complete hashes stay on this device.

Connect browser extension

Paste this device token into the extension once. It allows downloading encrypted records; your master passphrase is still needed to unlock them. Treat it like an account login.

Valid for 30 days. Revoke it from Devices & sessions when no longer needed.