Reference

FAQ

Quick answers to common questions about privacy, recovery, the extension, the free trial and moving your passwords.

#Privacy and security

#Can GrailVault read my passwords?

No. Everything is encrypted in your browser with keys derived from your master password. We store only encrypted data, and there is no administrator role with access to anyone's vault. See How your data is protected.

#Does GrailVault send my data anywhere else?

No. Your vault goes only to GrailVault, encrypted. The website and the extension have no analytics or tracking and load nothing from other sites. The only outside service involved is the optional breach check, which sends just five characters of a one-way fingerprint, and payments, which happen on the payment service's own page.

#What if I forget my master password?

Nobody can reset it because nobody can read your data. Use your recovery key on the sign-in page (Recovery key). Without the master password and the recovery key, the data cannot be recovered.

#What if I lose my phone with my authenticator app?

Sign in with a backup code, or use your recovery key. See Two-factor authentication.

#Has GrailVault been audited?

Not by an independent third party. It uses well-reviewed cryptography (libsodium, Argon2id, XChaCha20-Poly1305, WebAuthn) instead of home-made algorithms, and the design is written down so you can review it. See Limits and roadmap.

#How do I know if someone tried to get into my account?

Open Settings, Recent activity. It lists sign-ins, wrong-password attempts and security changes. See Recent activity.

#The browser extension

#Does it fill passwords automatically?

No. It fills only when you click the key button or Fill, and only on the website the login was saved for. See Fill and save logins.

#Which browsers does it work in?

Microsoft Edge (tested), Chrome and other Chromium browsers (the same code), and Firefox (built, not yet tested). Not on phones. See Install the browser extension.

#Does it save new logins by itself?

It offers. After you sign in or sign up it asks Save password?, and nothing is saved until you choose Save.

#Is it safe to give an extension access to all websites?

It needs that to show the key button where you sign in. It only looks for sign-in boxes, never sends page content anywhere, and fills nothing without your click. Read Safety and privacy for the details and the limits.

#Using it

#Can I import from my browser or another password manager?

Yes. Chrome, Edge, Firefox, Safari, Bitwarden, 1Password and LastPass exports (CSV) are supported, with a preview before anything is saved. See Import passwords.

#Does it work offline?

No. You need an internet connection to open the vault. Your keys exist only in your browser's memory while it is unlocked.

#Can I share a login with someone?

No. Every vault is private to one account. There are no shared vaults or teams. GrailVault is for individuals.

#Is there a mobile app?

Not yet. GrailVault works in your phone's browser and can use your phone's lock to unlock. The extension does not run on phone browsers. See Appearance and phones.

#How much can I store?

Up to 20,000 items per account, each up to about 256 KB.

#Can I export my data?

Yes, two ways: an encrypted backup (best for safekeeping), and a plain CSV file for moving to another program (not encrypted, so delete it afterwards).

#The free trial and the plans

#How does the free trial work?

You get 14 days with everything included, and no card is needed. See Plan and billing.

#What happens if I do not pay after the trial?

Your vault becomes read-only: you can still sign in, view, copy and export everything, but you cannot add or change items. Nothing is deleted. Choose a plan any time to carry on.

#How much does it cost?

₹69 per month, or ₹745.20 per year (that is 10% less than twelve monthly payments). Prices are in Indian rupees; taxes may apply. See the pricing page.

#How do I cancel?

Open Plan & billing and choose Stop renewal. You keep access until the end of the period you paid for.

#Where does my data live if I leave?

Export an encrypted backup first. Deleting your account erases your vault and cancels your plan; see Delete your account.