Updated 2026-07-11
Your vault stores three kinds of items. All of them — content, names, fields, file bytes — are encrypted in your browser before upload.
Logins
Username, password, URL, and notes, plus an optional TOTP seed so the vault can show live two-factor codes (see TOTP codes and the generator). The browser extension autofills logins on matching pages.
Secure notes
Free-form encrypted text for anything that isn't a login: license keys, recovery codes, private notes.
Files & documents
Upload any file — it's encrypted client-side before a byte leaves your browser, name included. The server stores opaque ciphertext it cannot open or preview. Per-file size and total storage depend on your plan.
Organizing and finding things
- Folders and favorites organize items; trash keeps deleted items recoverable until emptied.
- Search runs client-side, over data decrypted in your browser session — the server can't search what it can't read.
Every item can be time-locked
Any item can carry a schedule that makes it openable only during defined windows. See How time-locking works.