You use your Recovery Kit — a 25-character code shown once, at sign-up. It signs you in and rebuilds your vault. There's no "reset password" email, because we never hold anything that could reset it for you. If you lose both the master password and the Recovery Kit, the vault can't be recovered — that's what zero-knowledge actually means.
No. Everything is encrypted on your device before it touches our servers, with a key derived from your master password. We store ciphertext we can't open — not a backdoor, not a master key, not an exception for support requests.
Nothing is deleted and nothing becomes unreadable. You keep full access to read, search, edit, export and restore everything you already saved. The only thing that changes is you can't add items past the free plan's limit of 10, and the Premium-only features (health scans, breach checks, Travel Mode, alerts, reminders, backup) switch off until you resubscribe.
Encrypted backups are stored in Google Cloud's australia-southeast1 region, in Sydney. Nothing is stored unencrypted at any point between your device and that server.
Premium gives you an encrypted backup you can restore from on another device — it's a backup and restore, not a live, continuous sync. If you change something on one device, you won't see it update automatically on another.
An email address for your account, and an encrypted vault blob we can't read. Crash reports include a stack trace and device model, never vault contents. Full detail is in the Privacy Policy.
Free to start. A$2.50/month if you want the rest.
See plans