FAQ

#Security and privacy

#Can MimiKey see my passwords?

No. Items are encrypted on your device before they're uploaded, with a key derived on your device from your master password and Secret Key. The server stores only ciphertext and a sign-in verifier that can't be turned back into your master password. Your master password and Secret Key are never uploaded. See Security model.

#Has MimiKey been audited?

Not yet. MimiKey is in beta and hasn't had an independent third-party security audit. Until it has, we recommend not storing your most critical accounts — banking, your primary email, your Apple ID — in MimiKey.

#What if someone gets my Emergency Kit?

The Emergency Kit contains only your email address and Secret Key, not your master password, so they'd still need your master password to sign in. Treat it as a sensitive document anyway, and keep it apart from your master password.

#Do copied passwords stay on the clipboard?

In the Mac, iPhone and Android apps, copied items are cleared after 30 seconds (as long as the clipboard still holds what MimiKey copied), and also when MimiKey locks. On iPhone, copied items aren't shared with your other devices through Universal Clipboard.

#Your account

#I forgot my master password. What now?

Reset it using the Secret Key from your Emergency Kit. See Forgot your master password. Note that after a reset, items encrypted under your old master password may no longer be decryptable.

#I lost both my master password and my Secret Key. Can I recover my account?

No. The server never stores either one, so it can't reset or decrypt your data. Keep your Emergency Kit safe when you sign up.

#How do I delete my account?

There's no self-service option to delete an account in the apps yet. To delete all of your data, use Empty vault (清空保险库) in Account security, which deletes all items and sync history; your account and registered devices remain.

#I lost a device. What should I do?

Revoke it from another device or the web vault, then change your master password. See If a device is lost or stolen.

#Platforms and everyday use

#Which platforms are supported?

Mac, iPhone and iPad, Android, the web vault, and a browser extension for Chrome and Edge. The Mac, iPhone, Android and extension releases are all betas; a Windows app is in development. See MimiKey documentation for the status of each.

#Which browsers does the extension support?

Chrome and Edge 127 or later on macOS, together with the MimiKey Mac app. Safari and Firefox aren't supported yet; use Mac system AutoFill or the web vault instead.

#Can I use MimiKey offline?

Not yet. The Mac, iPhone and Android apps sign in to the server and sync when you unlock, so you can't unlock without a network connection.

#Why doesn't AutoFill show my login?

Usually because the item's website doesn't match the site exactly. On Mac, iPhone and in the browser extension, the item's website must start with https:// and have exactly the same domain and port as the current site — https://example.com doesn't match https://www.example.com. See How matching works.

#How do I move from another password manager?

Import your Bitwarden, KeePass or 1Password export in the Mac app. See Import and export.

#Data and billing

#Where is my data stored?

Your items are stored encrypted on MimiKey's servers and synced to the devices you sign in on. Each signed-in device keeps your Secret Key and the data it needs for syncing locally; signing out removes them.

#Does MimiKey cost anything?

Right now there's only the Free plan: 5 devices, 500 items per vault, 1 shared vault and 3 members per shared vault. See Plans and billing.