# Store passwords in the Vault > Keep logins, two-step codes and notes in the Vault, encrypted on this computer with a master password, and copy them or have them filled in for you. Source: https://plexiidesk.com/help/vault Section: Settings and integrations > Vault Plans: All plans Updated: 2026-10-15 The Vault keeps your logins safe inside PlexiDesk: usernames, passwords, two-step sign-in codes and notes. It is encrypted on this computer with a master password that only you know. While it is unlocked you can copy a login in one click, see a live two-step code, and let PlexiDesk fill in a connected app's login for you. ## Before you start - The Vault is on every plan. - **It stays on this computer.** The Vault is not synced to your account or your other computers, and nothing in it is sent anywhere. On another computer, set up a separate Vault. - **Your master password cannot be recovered.** PlexiDesk never stores it. If you forget it, the entries in your Vault cannot be opened. Choose a passphrase you can remember without writing it down. ## Open the Vault - **From Settings:** click the gear in the header, open the **Data** tab and click **Open the vault**. - **From the command palette:** press `⌘` `K` on a Mac or `Ctrl` `K` on Windows, type *vault* and choose **Vault**. > **Coming soon in PlexiDesk 4.3.28:** > The Vault is also in the side menu, under **Apps** > **Tools** > **Vault**, and opens in place like Calendar and Files. ## Set up your Vault The first time you open it, the Vault asks you to **Set up your vault**. 1. In **Master password**, type a password of at least 8 characters. A passphrase of several words is easier to remember and harder to guess. 2. Type it again in **Confirm**. 3. Click **Create vault**. The Vault is created and opens, unlocked and empty. ## Lock and unlock - **To lock the Vault,** click **Lock** at the top of it. PlexiDesk forgets the key until you unlock again. - **To unlock it,** open the Vault, type your master password under **Unlock vault** and click **Unlock**. The Vault also locks when you quit PlexiDesk, so you unlock it once each time you start. It does not lock by itself while PlexiDesk is open. The footer shows **Local · encrypted** with a padlock once you have a Vault: green and open while it is unlocked, closed while it is locked. See [The footer bar](https://plexiidesk.com/help/app-footer). ## Add an entry 1. Click **Add**. In an empty Vault, click **Add an entry**. 2. Fill in the **New entry** window: | Field | What to enter | | --- | --- | | **Title** | A name for the entry, such as the service's name. Required. | | **URL (optional)** | The site's address, such as `https://example.com`. | | **Username / email** | The name or email you sign in with. | | **Password** | The password. Click the eye to see what you typed. | | **TOTP secret (optional)** | The setup key for two-step sign-in codes, if the site gives you one. See below. | | **Notes (optional)** | Anything else, such as recovery codes or security questions. | 3. Click **Save**. It says **Encrypting…** for a moment. The password, the two-step setup key and the notes are encrypted. The title, address and username are kept readable, so you can search for them. ### Two-step sign-in codes When a site turns on two-step sign-in, it usually shows a QR code and a text key for an authenticator app. Paste the text key into **TOTP secret (optional)**. It is made of the letters A to Z and the digits 2 to 7, at least 16 characters long. Spaces and lower-case letters are fine. The Vault then shows the current six-digit code, which changes every 30 seconds. ## Use an entry Each entry in the list has buttons: | Button | What it does | | --- | --- | | **Copy username** | Copies the username. It is cleared from the clipboard after 60 seconds. | | **Copy password** | Copies the password. It is cleared from the clipboard after 30 seconds. A note says **Password copied · clears in 30s**. | | **Copy current TOTP code** | Copies the current two-step code, and shows how many seconds it has left. | | **Reveal** | Shows the username, password, two-step code with a countdown, notes and address. Click **Hide** to hide them again. | | **Delete** | Deletes the entry, after you confirm. | To find an entry, type in **Search entries…** at the top. It searches the title, address and username. ### Change an entry To change a saved entry, add a new entry with the new details, then delete the old one. ### Delete an entry 1. Click **Delete** on the entry. 2. PlexiDesk asks **Delete "…"?** and warns that this cannot be undone. 3. Click **Delete forever**. ## Let the Vault fill in a login Bind an entry to a connected app, and PlexiDesk fills in its username and password when the app's sign-in page loads, while the Vault is unlocked. See [Auto-fill a connected app from the Vault](https://plexiidesk.com/help/vault-autofill). ## Change your master password 1. Click **Change password** at the top of the Vault. 2. Type your **Current password**, then the **New password** twice, the second time in **Confirm new password**. 3. Click **Change password**. It says **Re-encrypting…** while every entry is encrypted again with the new password. If anything goes wrong part way, nothing is changed and your old password still works. The Vault stays unlocked afterwards. ## Organisations If you switch between organisations in PlexiDesk, each one has its own list of Vault entries on this computer. Your master password is the same for all of them. See [Organisation settings and switching workspaces](https://plexiidesk.com/help/settings-organisation). ## Tips - **Use a passphrase** of four or five unrelated words for your master password. - **Lock the Vault** when you step away from your computer. - **Add the address** to each entry, so you can find it by searching for the site. - **Bind your connected apps** so their logins are filled in for you. ## Common questions **I forgot my master password.** It cannot be recovered or reset, because PlexiDesk never stores it. The entries in your Vault stay encrypted. **It says Incorrect master password.** Check that Caps Lock is off, and type it again. **My Vault is empty on my other computer.** The Vault stays on the computer where you made it. It is not synced. **Is my Vault in my workspace export?** No. Exports leave the Vault out, so your passwords are never written to a file you might share. See [Export your work and import it elsewhere](https://plexiidesk.com/help/data-export-import). **The TOTP secret is not accepted.** It must be the text key from the site's two-step setup, at least 16 characters of the letters A to Z and digits 2 to 7. A six-digit code is not the setup key. ## Related - [Auto-fill a connected app from the Vault](https://plexiidesk.com/help/vault-autofill) - [Add and use connected apps](https://plexiidesk.com/help/connected-apps) - [Keep a site signed in on your desks](https://plexiidesk.com/help/browser-stay-signed-in) - [Privacy settings and what leaves your computer](https://plexiidesk.com/help/settings-privacy) - [Sync your work across devices](https://plexiidesk.com/help/accounts-and-sync)