Encrypted on your device — unreadable to us
- Passwords
- The notes attached to each login
- The contents of your notes
- The contents of your files
- Wallet addresses
What we can see, and what we cannot
A password manager should be verifiable, not reassuring. So here are the details, unrounded.
Visible to the server — worth knowing
- Each entry's label ("Gandi account")
- The username and the website address
- File names and note titles
- Your email address and your groups
This information powers sorting and search. We are working on encrypting it too: it is part of the next format change.
The algorithms we use
- Encryption
- AES-256 in CBC mode, with a random initialisation vector for every secret.
- Key
- Derived with SHA-256 from your personal key: 64 characters drawn at random on your machine.
- Group sharing
- One key per group. Shared items are encrypted with that key, never with yours.
- Authentication
- The server never receives your key, only a derived value, of which it stores a hash.
- Transport
- HTTPS across the whole site and API.
Your key file
When you create your account, the app asks you to save a recovery file. It holds your personal key and your group keys. Without it your data is permanently unreadable: we hold no copy. Keep a backup away from your main computer.
What will change
Two pieces of work are under way: encrypting labels and addresses as well, and moving to authenticated encryption (AES-GCM) together with an X25519 key exchange for sharing. This page will be updated as we go, and we will say what changed.