Lifub · Password Manager
Keyring
Encrypted in your browser. The server only ever stores ciphertext.
Loading the cryptographic core…
The Rust core is compiled in a worker before anything is decrypted.
First device
Create your encrypted Keyring
A fresh 256-bit root and recovery secret are created inside the shared Rust core. Your password never leaves this browser.
Local session locked
Welcome back
Unlocking decrypts key envelopes inside the worker. This page never receives your password or your keys.
Shown once
Save your recovery phrase
These 24 words are the only way back in if you forget your password. They are shown once and never stored in readable form.
Personal keyring
Logins
Create a login or clear the search filter.
- Username
- Password
- ••••••••••••
- Website
Monitor
Not checked yet.
Checked locally. Passwords are compared as salted digests inside the Rust core and never leave this device — no breach database is contacted.
Local password
Change the password that unlocks this browser without rotating your Keyring keys, recovery phrase, account locator, or sync identity.
Encrypted backup
The archive is encrypted with a password you choose here, separate from your Keyring password. It is produced inside the worker and never sent anywhere.
Add or update from CSV
Recommended merges the whole active keyring by domain and case-sensitive username, keeps previous passwords in history, and moves duplicate entries to Trash. Only unresolved groups need review.
Before the preview, Keyring automatically downloads and verifies an encrypted backup using this unlocked session. No master password is required to import or update. Keep the backup; restoring it requires this vault's password or recovery phrase from when the backup was created.
CSV passwords update matched logins and distinct notes merge. Recommended also removes repeated values and uses valid CSV authenticators; conflicting credentials need review. Conservative matches exact URLs first and keeps authenticator conflicts for review. Entries moved to Trash remain recoverable.
Previews expire after five minutes, or when Keyring locks, the vault changes, or its worker restarts. Your vault items change only after Apply.
Local agent handoff
Exchange public descriptors locally with the helper, verify the intended sender, then pin its descriptor here. Only sealed files can use this pairing. The private recipient key stays encrypted on this browser profile and is excluded from vault exports, backups and sync.
Not in the web app yet
Vendor import and Bitwarden sync are multi-step flows whose state lives across several steps, and only the browser extension carries them today. Use the Keyring extension for those; it opens the same keyring and the same ciphertext.