A different password everywhere, without remembering them
A vault encrypted on your devices, synced through the NOMVEX server, which cannot read it. Six steps, in order.
1. Your seat in the vault
Seats are opened by the owner, one account at a time. The invite comes by email once the server opens: asking now reserves yours.
End of access: nothing is cut at once. 30 days to export (three reminders), account disabled on day 30, deleted on day 90. A new grant before day 90 turns it back on.
2. Install the official app
Only from the official stores or the publisher’s site. Encryption happens in the app: the NOMVEX server only receives encrypted data and cannot read it.
3. A long master passphrase
It is the only thing to remember. Nobody, not even NOMVEX, can recover it if you forget it: write it on paper, kept at home. Nothing you type here leaves this device.
Words from the EFF Large Wordlist (Electronic Frontier Foundation, CC BY 3.0 US licence).
4. Two-step verification
In the app: Settings > Security > Two-step login, with an authenticator app. Keep the recovery code on paper. Family or team sharing requires this step.
Then on your most important accounts- Google / Gmail (checked 2026-10-26)
- Apple Account / iCloud (checked 2026-10-26)
- WhatsApp (checked 2026-10-26)
- Facebook (checked 2026-10-26)
5. An emergency contact and the vault check-up
- Emergency access: someone you trust can ask for access; you have a delay to refuse. How-to
- Vault reports: reused, weak or exposed passwords. Fix email, bank and the accounts that recover the others first. Reading the reports
6. A copy at home, each month
NOMVEX makes an encrypted backup every day, but it stays on the same server: it does not protect against losing the server. Export your vault once a month to your own device (encrypted format). How to export
The Vaultwarden server is free software (AGPL-3.0), run unmodified: source code.