Pabbel Vault: Password Manager & 2FA

Zero-knowledge password manager. Fill passwords and 2-step codes, save new logins and generate strong passwords.

Pabbel Vault keeps your passwords, 2-step verification codes and secure notes end-to-end encrypted, and puts them where you sign in. Everything is encrypted on your device before it is stored. Your vault password never leaves your browser. It isn't sent to Pabbel, and Pabbel can't reset or read it. Pabbel's servers only ever hold ciphertext. WHAT IT DOES • Fill in one click: a small Pabbel button appears in the sign-in field you're typing in. Pick a login and the username and password are filled, with the events the page needs (React, Vue and other modern sign-in forms included). • Multi-step sign-ins: email first, then the password page, then the code page. Each step is offered the right thing. • 2-step codes (TOTP): live codes with a countdown, computed on your device. They fill single code fields and the six-boxes-one-digit-each kind. After a password fill, the matching code can wait on your clipboard for the next step. • Save as you go: sign in somewhere new and Pabbel Vault offers to save the login, or to update it when the password changed. You can choose "Never for this site". • Password generator: length, upper-case, numbers and symbols, made with a secure random generator. Sign-up forms get a strong password in one click, with the confirm field filled too. • For this site first: the popup leads with the logins and codes for the page you're on, with search across everything else. • Personal and team vaults: shared team vaults work just as on the web, and each item can be moved between vaults. • Keyboard shortcut: Ctrl+Shift+L (⌘+Shift+L on Mac) fills the best login, or the code when a code field is focused. There's also a right-click menu. • Toolbar badge: shows how many saved logins match the current site while the vault is unlocked. • Auto-lock: after 1, 5, 15, 30 or 60 minutes without use, or only when the browser closes. The unlocked keys live in memory only and are gone when the browser closes. • Copied passwords are cleared from the clipboard after 45 seconds. • 31 languages, including Arabic, Persian and Urdu (right to left). • Light and dark themes follow your system. SAFE BY DESIGN • Never fills on plain http pages (localhost excepted), in hidden fields, or in a frame from a different site than the page you're on. • A web page never sees your vault. The in-page menu shows only names, and a password reaches the page only after you pick that one login. • "Sign in with Pabbel" opens Pabbel's own sign-in page with all your usual protections, including 2-step verification and the device prompt. The extension never asks for your Pabbel account password. • No analytics, no tracking and no ads. Your data is never sold. You need a free Pabbel account with Vault set up (vault.pabbel.com). Setting up takes a minute.