How are my passwords stored?

All sensitive fields (passwords, usernames, emails, URLs, notes) are encrypted using AES-256-GCM. Your master password is never stored - it is hashed with Argon2id and used to derive the encryption key. Service names are stored unencrypted to enable search functionality, so the list of services you have credentials for is visible, but not the credentials themselves.

What if I forget my master password?

Use recovery codes with `!password recover`. Without recovery codes, your stored passwords cannot be recovered - they're encrypted with your master password. Recovery codes are shown once when you set up your vault. Save them somewhere safe immediately - they cannot be viewed again later.

Does searching for a service name need to be exact?

No, service name search is case-insensitive. Searching "github" will find "GitHub".

Why did my vault lock itself?

The vault automatically locks after 15 minutes of inactivity. This is a security measure - the encryption key is only held in memory while you're actively using the vault.

What happens if I enter my master password wrong multiple times?

Your account is temporarily locked after several failed attempts to prevent brute-force attacks. Wait for the lockout period to expire before trying again.

Saasis

Name: Password Manager
Author: Saasis

Password Manager

Secure password storage with master password encryption and recovery codes

productivity

KEY FEATURES

AES-256 encryption

Password generator

Recovery codes

QUICK START

Try this example:

save my Netflix password

COMMANDS