Two-factor authentication is on. Enter the 6-digit code from your authenticator app, or one of your backup codes.

If you forget your master password, your vault is permanently inaccessible. There is no recovery.

Your master password never leaves your device. All encryption happens in your browser using AES-256-GCM (WebCrypto API). The server stores only ciphertext.