Question 1

Can Bizhub or its employees see my passwords?

Accepted Answer

No. The app is zero-knowledge: encryption and decryption happen in your browser, and our servers only ever store ciphertext, hashes and salts. We have no technical way to read your secrets.

Question 2

What happens if I lose my recovery phrase?

Accepted Answer

We genuinely cannot recover it for you — we only store a bcrypt hash, never the phrase. That's a deliberate security property: it's what guarantees only you can unlock your vault. Store your 12 words offline in a safe place, ideally in more than one secure location.

Question 3

What encryption do you actually use?

Accepted Answer

AES-256-GCM (authenticated encryption) for every secret and file, with a unique random IV per item. Keys are derived with PBKDF2 using SHA-256 and 100,000 iterations plus a per-account salt.

Question 4

Is my data encrypted in transit and at rest?

Accepted Answer

Yes — and crucially, it's already encrypted before it leaves your device. So it's protected in transit, at rest on our servers, and even in your browser's local storage, where keys are themselves encrypted.

Question 5

Do you support two-factor authentication and passkeys?

Accepted Answer

Yes. Sensitive folders can be locked behind a 6-digit TOTP code or a hardware-backed passkey using WebAuthn / FIDO2.

Question 6

What if someone steals my device?

Accepted Answer

Keys are stored encrypted at rest and are non-extractable, protected folders require a second factor to open, and you can revoke active sessions remotely from another device.

The questions security-conscious people ask

Start protecting your credentials today