whym

What is a vault?

One encrypted place for every login you own. You remember a single password; it remembers the rest.

Everything is scrambled on your own device before it is sent, so what sits on the server is unreadable noise — to a thief, and to us.

What is a passphrase?

Several random words instead of one clever word.

doorstop-symphonic-related-shivering is far stronger than Tr0ub4dor&3 — and much easier to type on a phone at 3am.

Use Suggest a passphrase. The strength comes from the words being picked at random, not from you being imaginative.

Write it down before you continue. It cannot be reset.

What is two-factor?

Two different kinds of proof: something you know (your passphrase) and something you have (your phone).

Even if someone learns your password they still cannot get in, because the six-digit code changes every 30 seconds and exists only on your phone.

You need an authenticator app:

Scan the square code once. The app then generates codes forever, even offline.

Authenticator code