Password renewal reminders

Every entry gets a due date. The dashboard starts a countdown once an entry enters the reminder window. These settings are encrypted with your vault, so the server never learns your schedule.

Security

Backup

A backup is encrypted with its own passphrase, so it is safe to keep in cloud storage. It uses the same format as the Windows desktop app.

How this is protected

• Master password → PBKDF2-HMAC-SHA256, 600,000 rounds, in your browser.
• Entries → AES-256-GCM with a fresh nonce for every save.
• The server receives a separate login proof that cannot decrypt anything.
• Fingerprint unlock seals the key with a secret from the authenticator (WebAuthn PRF).