Frequently asked questions

No. Your vault is encrypted on your device with keys that only you have. Our server stores only encrypted data, and it never receives your master password or your Secret Key.

Because you don't have to take our word for it: Passbox is open source, its whole security design is public, and the server never sees your passwords or keys. The security page explains how.

Chrome and Edge with the browser extension, Windows, macOS and Linux with the desktop app, iPhone and iPad, Android, any current browser with the web vault, and the command line. See Download.

Yes. Passbox imports from 1Password, Bitwarden, Proton Pass, Dashlane, LastPass, Passbolt, KeePass, KeePassXC, Apple Passwords, Chrome, Firefox, Edge, Safari, Brave and any CSV file. The file is read on your device. Supported formats.

A long random code that is created on your first device and printed in your Emergency Kit. Together with your master password it protects your vault: even someone with a stolen copy of our database cannot try to guess your password without it. You enter it once on each new device, or move it there with a device code.

Nobody can reset it, not even we, because nobody else has your keys. But you can get back in with the recovery code from your Emergency Kit, through your family or organization (on by default there), or let a trusted person access your vaults through emergency access. Set one of them up today.

When you share a vault, its key is sealed with X-Wing, which combines classic elliptic-curve cryptography with ML-KEM, a standardized method designed to resist quantum computers. If someone records shared data today, a future quantum computer still cannot open it.

Privately through GitHub Security Advisories, not as a public issue. We confirm every report within three working days. How to report.

Yes. Start a family and Passbox creates a family vault. Everyone keeps a private vault that nobody else can open. You choose who can view, edit or manage the family vault.

As many as you like. Family costs €1 a month or €10 a year for the whole family on the hosted service, and guests such as the babysitter are free.

No. Admins manage people, groups and access, but cannot open vaults they were not given access to. Recovery through administrators is on by default so nobody gets locked out; it needs an identity check, is logged and mailed to the member, and members can turn it off.

Yes. Members sign in with OpenID Connect providers such as Entra ID, Google or Okta, and SCIM 2.0 keeps members and groups in sync with your directory.

No. Self-hosting is free and includes every feature, for any number of people. The code is MIT-licensed, so you can run, change and check it yourself.

€1 a month (€10 a year) for one person on Private, the same for a whole family of any size on Family, and €3 per member (€30 a year) on Teams, with every feature. Guests, AI agents and service accounts are free.

The hosted service runs in data centers in Germany. When you host Passbox yourself, your data stays on your server. Either way the server only stores encrypted data.