Web vault

#Open the web vault

The web vault is at /app/. Encryption and decryption happen in your browser; your master password and Secret Key are never sent to the server. It works in up-to-date versions of Chrome, Edge, Safari and Firefox.

• Create an account: /app/?view=register
• Forgot your master password: /app/?view=recover

#Sign in

1. Enter your email address and master password.
2. The first time you sign in on this browser, also enter your Secret Key (it's in your Emergency Kit).
3. Click Sign in (登录).

The browser then remembers your Secret Key. Next time the page shows that this device is already registered and only your master password is needed (本机已登记该邮箱的设备，登录只需主密码). To use a different Secret Key, click Change (更换).

Important Only use the web vault on a computer you own and trust. On a shared computer, click Sign out (退出登录) when you're done so the Secret Key stored in the browser is removed.

#Layout

#Manage items

• Search to find items by name, username and other fields.
• Click New item (新建条目), choose a type, fill in the fields and save. For logins, you can generate a random password in the password field.
• Select an item to see its details, where you can reveal and copy fields, edit or delete it. Deletions sync to all of your devices.
• The time of the last sync is shown above the list; click it to refresh.

If any items can't be decrypted with your current master password and Secret Key (for example after you've recovered your account), the page tells you how many. If you don't need them, you can empty your vault in Account security.

#Lock and unlock

• The web vault locks after 5 minutes of inactivity, or when you choose Lock from the account menu.
• After you reload or reopen the page, it opens locked and shows the signed-in account. Enter your master password to unlock; it's checked locally in your browser.
• The lock screen also offers:
  • Full sign-in (完整登录): sign in again with your email, master password and Secret Key.
  • Forget this device (忘记本机): removes the saved session and Secret Key from this browser. The device stays registered on the server; you can revoke it in Account security.
  • Sign out (退出登录): ends the server session and removes the Secret Key stored in this browser.

#Account security

Open Account security from the account menu to:

• Change master password (改主密码): enter your old master password, your Secret Key and a new master password (at least 12 characters). MimiKey re-encrypts every item in your browser, then signs out all sessions so you sign in again with the new password.
• Manage devices (设备管理): see when each device was registered and last active, and its key version, and revoke devices.
• Empty vault (清空保险库): permanently deletes all items and sync history. Your account and registered devices remain. You confirm by typing your account email.

See Devices and account recovery.

#Sharing, third-party access and plans

• Sharing (共享): create shared vaults, invite members and set read-only or read-write access. See Shared vaults.
• Third-party access (第三方授权): review and revoke apps you've authorized. See the Developer overview.
• Plan (套餐): see your current plan and usage. See Plans and billing.

#How the web vault differs from the apps

The web vault is handy for viewing and managing items on a computer without the app. These features are currently only in the apps:

• The Passkey category and the verification code secret field on logins. Edit logins that have a verification code secret, and passkey items, on Mac or iPhone.
• AutoFill. To fill in the browser, use the browser extension.
• Touch ID and Face ID unlock.
• Import and export.