Security
Security FAQ
Short answers to the most common security questions.
Can a KeyValt employee see my passwords?
No. Vault contents are encrypted before they reach our servers, and no KeyValt system holds a key that decrypts them.
What if KeyValt’s database is stolen?
Attackers would get ciphertext protected by your master password via Argon2id. A strong master password makes guessing impractical; a weak one does not — that is why we require a strong one.
Is KeyValt unhackable?
No software is. We minimise what we can see, encrypt what matters on your device, verify every fill, and publish how it works so it can be scrutinised.
Does the extension read my browsing?
The extension only runs on the websites you grant it and on the KeyValt dashboard. It does not collect your browsing history.