Everything you need to know.

Getting Started

After installing (see the Install Guide), open your server's address in a browser — usually http://localhost:7777 on the machine it's installed on, or http://<your-ip>:7777 from another device on the same network.

1. The first time you open it, you'll create the admin account (name, email, password).
2. You'll land on the Dashboard — empty at first, showing your security score and password count.
3. Click + Add Password to create your first entry.

Managing Passwords

Each entry stores a service name, username, password, URL, category, and optional expiry date. Click ⚡ Generate Strong in the Add Password form to create a random secure password instead of typing your own.

From the Vault grid, each card lets you:

• 👁 Reveal — show/hide the password
• 📋 Copy — copies to clipboard, clears automatically after 30 seconds
• ⭐ Favorite — pins it to the Favorites panel
• ✏️ Edit / 🗑 Delete — admin and manager roles only; regular members can add but not edit/delete

Categories

Categories organize your vault beyond the default 7 (General, Communication, Infrastructure, Sales, Development, Finance, Productivity). Go to Categories in the sidebar to add, rename, or delete your own — renaming automatically updates every entry using it, and deleting moves those entries to the first remaining category instead of losing them.

Teams & Sharing

Create teams under Teams in the sidebar, then when adding or editing a password, use Share With Team to make it visible to everyone on that team, or Share With Specific People to grant individual access without a full team.

The same account can be signed in on multiple devices simultaneously — logging in on a new device doesn't sign you out elsewhere.

Access Requests

If someone needs a password they don't have access to, they can browse the directory under Access Requests (names only, no passwords shown) and request one with an optional reason. An admin or manager approves or denies it from the same panel — approval generates a one-time QR code and emailed link that reveals the password exactly once, then permanently expires.

2FA & Passkeys

Under Settings → Security, enable Two-Factor Authentication by scanning the QR code with Google Authenticator, Authy, or any TOTP app. You can also register a passkey (fingerprint, face, or hardware security key) as an alternative to typing a code every time.

Zero-Knowledge Mode

Toggle this on under Settings → Security to encrypt entries client-side using your master password — the server never sees the plaintext, even for team-shared entries. Important: there is no password recovery if you forget your master password and haven't set up organization-level account recovery in advance (also under Settings).

Health Check

Click Scan for Breached Passwords under Health Check to compare your vault against known data breaches. This uses k-anonymity — only a 5-character hash prefix ever leaves your browser, never the actual password.

Admin: LDAP, Webhooks, Backups

All under Settings, on the Unlimited/Lifetime plans:

• Integrations tab — configure Active Directory/LDAP sync to auto-create and deactivate users from your corporate directory.
• Integrations tab — add webhooks for Slack/Discord/Zapier to get notified of vault events.
• Data tab — manual and automatic backups (every 6 hours), each downloadable individually.

Migrating From Another Manager

Under Settings → Data, use the CSV import tool — it auto-detects exports from LastPass, 1Password, Bitwarden, Dashlane, and Keeper, or accepts a plain CSV if you're coming from somewhere else. Download the sample template first if you want to see the expected format.