Web vault

The web app is the full vault and where every setting lives. Nothing to install — it runs in any modern browser.

Add your first item#

Create a new item and pick its type: login, payment card, secure note, identity, SSH key, bank account, and more. Each type shows the fields that make sense for it.

On any password field, use the built-in generator rather than inventing a password yourself. It produces a random string from a cryptographically secure source, and skips characters that are easy to confuse — no 0/O or 1/l/I mix-ups when you have to read one aloud.

Unlock faster#

Typing a long master password on every visit gets old, and it's the main reason people pick short ones. In Settings you can set up:

• A passkey — unlock with your device's fingerprint, face, or PIN.
• A Quick PIN — a short code for this browser only.
• An auto-lock timeout — how long the vault stays unlocked while you're away.

Check your vault health#

The Security page scores your vault and flags weak, reused, and stale passwords, so you know what's worth fixing first rather than trying to fix everything at once.

Use it as your authenticator app#

Vault items have a TOTP secret field. Paste a service's two-factor secret there and KeepInVault generates the same rotating 6-digit codes a separate authenticator app would — sitting right next to the password they belong with.

1. 1
   On the other service, start setting up two-factor authentication until it shows a QR code, then choose its "can't scan the code?" option to reveal the secret as text.
2. 2
   Paste that secret into the item's TOTP secret field and save.
3. 3
   Open the item whenever you need a code — it shows a live 6-digit code with a countdown and a copy button.