axi0passwords

Passwords

Your logins, encrypted in your browser with your axi0 Key before anything is saved. We hold ciphertext we cannot read. A generator, one-time codes, imports from Google, Firefox, Bitwarden, 1Password and Apple, and a check for weak, reused and breached passwords.

What it does not do yet, next to Google’s: fill sign-in forms for you. That needs a browser extension, which we have not built; copy and paste instead (we clear the clipboard after 30 seconds). No passkeys yet either.

Without a Key, what you add stays in this tab only and nothing is written anywhere; closing the tab forgets it.

Logins

    No logins yet. Add one, or import a file from another manager: everything is encrypted here before it is saved.

    Pick a login to see it here.

    New login

    The setup key a site shows next to its QR code. We make the six-digit codes here, like an authenticator app.

    Separate tags with commas.

    Password generator

    Kind

    Made here from your browser’s cryptographic random numbers; nothing is sent.

    Weak, reused and breached

    Weak means our estimate is under 40 bits (the most common passwords, words, dates and keyboard rows count for little). Breach data: Have I Been Pwned.

    Import from another manager

    Export a CSV file from your old manager, then choose it here. It is read in this browser; nothing is uploaded as it is. Logins already here (the same site, username and password) are left out.

    Which files we read, and how to make them
    Google Password Manager or Chrome (also Edge, Brave, Opera)
    Settings, Google Password Manager, Settings, Export passwords. First line: name,url,username,password,note
    Firefox
    about:logins, the ⋯ menu, Export Passwords. First line: "url","username","password","httpRealm","formActionOrigin","guid","timeCreated","timeLastUsed","timePasswordChanged"
    Bitwarden
    Tools, Export vault, File format .csv. First line: folder,favorite,type,name,notes,fields,reprompt,login_uri,login_username,login_password,login_totp (organization vaults start with collections, which become tags)
    1Password 8
    File, Export, CSV. First line: Title,Url,Username,Password,OTPAuth,Favorite,Archived,Tags,Notes (archived items get the tag Archived)
    Apple Passwords or Safari
    Passwords app: File, Export All Passwords to File. First line: Title,URL,Username,Password,Notes,OTPAuth
    Anything else
    A first line that names its columns (title or name, url or website, username or email, password, notes, totp, folder, tags): LastPass, KeePassXC, Proton Pass and Dashlane files read this way.

    A CSV export is every password in plain text: delete it once your logins are in.

    Export

    Encrypted file (.json)

    Locked with a passphrase you choose: PBKDF2-SHA256 (600,000 rounds) and AES-256-GCM, the recipe written in the file, so it also opens with standard tools. Without the passphrase nobody can open it, us included.

    Plain CSV

    Every password in plain text, readable by anyone who opens the file. Chrome, Firefox and Bitwarden read it (name, url, username, password, note, then totp, folder, tags, favorite).