Frequently asked questions
Everything important about ClavisPass.
Short, clear, and without filler. This page covers the most important questions about security, sync, platforms, and the current state of ClavisPass.
Product and platforms
What is ClavisPass?+
ClavisPass is a local-first password manager for desktop, mobile, and browser workflows. It focuses on encrypted vaults, flexible entries, and sync options that are not tied to one mandatory ClavisPass account.
Which platforms are planned for ClavisPass?+
Native apps are planned for Windows, macOS, and Linux, along with Android, later iOS, and extensions for Firefox and Chrome. The Firefox extension is already available on addons.mozilla.org.
Is ClavisPass already available on the App Store or Google Play?+
Not yet. The store badges and QR codes are prepared on the download page, but they will only be connected once the final official listings are live.
Security and privacy
Who can read my passwords?+
The vault is designed to be encrypted locally on your device. Readable vault data and your master password should not be sent to a ClavisPass server.
Which encryption does ClavisPass use?+
The current technical focus is Argon2id for key derivation and XChaCha20-Poly1305 for authenticated vault encryption. The key point is that sync providers store encrypted vault data.
Is ClavisPass open source?+
ClavisPass is set up openly on GitHub so users can follow releases, inspect the code, and report issues. Official downloads should still come only from linked release and store sources.
Sync and data
How does sync work in ClavisPass?+
ClavisPass should not force your vault into one hosted account. Instead, encrypted vault files can be synced through supported providers or local files.
What is ClavisPass Hub?+
ClavisPass Hub is a self-hosting option for users who want to store encrypted vault files on their own server instead of relying only on Dropbox, Google Drive, or local files.
Does using Dropbox or Google Drive make the vault unsafe?+
The important part is that the vault is encrypted before it is stored or synced. The sync provider is transport and storage, not the place where readable passwords are processed.
Everyday use and migration
Which kinds of entries can I store?+
ClavisPass uses modular entries. In addition to logins, planned entry data includes TOTP codes, recovery codes, cards, WiFi data, documents, attachments, notes, folders, tags, and favorites.
Can I import existing passwords?+
Yes, imports are an important part of the product. ClavisPass is designed around existing data from browser exports, Bitwarden, KeePass/KDBX, and backups.
What about browser extensions?+
The Firefox extension is available, and Chrome is planned. The goal is controlled access between trusted browsers and the unlocked desktop app.