Start with your email address. The vault is for approved people only — there is no sign-up and nothing to request.
Recovery code
6 + 6 + 6 + 6
This is the key to the whole vault. Never send it to anybody — not on WhatsApp, not by email, not even to your partner. An invitation code for somebody new looks different: four characters per group.
Print this or copy it onto paper and keep it somewhere safe, away from the computer. It is the only other copy of the vault key: if you forget the master passphrase this is what brings the vault back, and if both are lost there is no way in at all — not for me, not for Cloudflare. It will not be shown again once you leave this page.
The master passphrase never leaves this browser. Passwords are sealed here before they are stored, and the server only ever sees ciphertext.
The recovery code does not cover every folder
Some folders were made before the current recovery code. If everyone in one of them forgot their passphrase at once, the printed code could not bring it back. Make a new recovery code from the People page and it will cover them all.
New folder
Each folder has a key of its own. Somebody who is not in a folder does not hold its key — the server will not send it to them, and they could not open it if it did.
Your master passphrase
This is what opens the vault. Changing it does not change the vault key itself — every account stays exactly as it is, and the printed recovery code goes on working.
Two-step sign-in
Chrome extension
Backup
One file with every account, note and card you can see, encrypted with a password you choose now. Without it the file is useless to anyone.
Delete account
Removes you from this vault for good: your record, your sessions and every key sealed to you. The team keeps its accounts and files.
What you type on the sign-in page instead of the email. The address goes on working either way — it is what the approved list is written in.
The recovery code
The second copy of the vault key. If the paper is lost, somebody saw it, or it was sent to anybody by mistake, make a new one here and the old code stops working the moment you do.
User control
Press “Control” next to anyone: suspend the account, sign out every session, reset two-step or the passphrase, and the accounts they can open, with their passwords.
Add someone
A new person starts with nothing — they see nothing at all. You hand over the invitation code yourself and they choose their passphrase; then you decide: whole folders under Access, or single accounts from inside each account → "Who can see it".