Frequently asked questions

No. ZeroVault uses a zero-knowledge design, so we never receive or store your master password in a recoverable form and we cannot read or reset it. If you forget it, the vault items encrypted under it cannot be decrypted. Keep your master password safe.

It means your vault contents and the key that protects them are never available to our servers. Your entries are encrypted in your browser before they are sent to us, so we only ever store ciphertext. It does not mean nothing is stored server-side: your email, an encrypted-at-rest two-factor secret, and security activity logs are stored so the service can function.

No. ZeroVault is not offline-first. Signing in, unlocking your vault, and syncing all require a live internet connection to our servers. Client-side encryption means your data is encrypted on your device before it is sent — it is a security technique, not an offline or local-only storage mode. You can install ZeroVault as a Progressive Web App, but that only caches the app shell for faster loading, not your vault data.

The "forgot password" flow lets you set a new account password via a signed, time-limited email link. It restores access to your account, but it does not recover your vault: items saved under your old master password can no longer be decrypted, because the key was derived from a password we never had. To change your master password without losing data, use the in-app change flow while signed in, which re-encrypts your items in your browser.

Yes. You can enable TOTP-based 2FA using any authenticator app (Google Authenticator, Authy, Microsoft Authenticator, and others), or receive codes by email. 2FA protects sign-in and is layered on top of client-side encryption, not a replacement for it.

ZeroVault is free to sign up and use, with no credit card required. All core features — encrypted sync, shared vaults, 2FA, password health, and breach checks — are included.

ZeroVault is a browser-based web application; there is no separate app in the Apple App Store or Google Play. You can install it as a Progressive Web App (PWA) from your browser for a native-like experience on mobile and desktop.

Vault items are encrypted on your device with AES-256-GCM before they leave your browser, so they are already ciphertext in transit and at rest. All traffic to ZeroVault is served over HTTPS, and the service operates from the EU under GDPR.