Updated 2026-07-11
In-vault TOTP codes
Add a TOTP seed (the QR-code secret a site shows when you enable two-factor) to any login. The vault then displays the rotating six-digit code alongside the password — computed locally from the encrypted seed, which the server never sees in plaintext.
This is convenient, with a trade-off worth knowing: storing the password and the second factor in the same vault means your vault unlock protects both. For your most sensitive accounts you may prefer a separate authenticator.
The password generator
Generate strong random passwords when creating or editing a login — length and character classes are configurable. Generated passwords are never sent anywhere until you save the item, at which point they're encrypted like everything else.
Clipboard hygiene
Copied passwords and codes are cleared from the clipboard automatically after a short interval. See Auto-lock and clipboard clearing.