Keypher Documentation

The complete guide to mastering the Keypher Zero-Knowledge Vault.

1. Local vs Cloud Logins

Keypher is designed with cryptographic sovereignty in mind. We offer two distinct operational modes depending on your threat model and convenience requirements.

Local Extension Mode

In this mode, the extension operates in an air-gapped capacity. Your encrypted vault is stored strictly in your browser's local storage. No network requests are made. Ideal for high-security environments.

Cloud Sync Mode

Your vault is still encrypted locally on your device, but the resulting indistinguishable ciphertext is synced to Keypher Cloud (Cloudflare Edge). This allows seamless syncing across all your devices.

2. Installation & Setup

  • 1

    Download the Keypher Extension from the Chrome Web Store or Firefox Add-ons.

  • 2

    Pin the extension to your toolbar for easy access.

  • 3

    Click the extension icon. Choose Create Account if you want cloud sync, or select Use Locally to remain offline.

  • 4

    Set a strong Master Password. Do not lose this. We cannot reset it for you.

3. Managing Records

You can add Logins, Secure Notes, and Credit Cards directly from the extension popup or the Cloud Dashboard.

Adding a new credential

  • Open the extension or dashboard.
  • Click the "+" (Add Item) button.
  • Select the item type (Login, Note, Card).
  • Fill in the URL, Username, and Password.
  • Click Save to Vault. The data is instantly encrypted before saving.

4. Generator & Autofill

Password Generator

Never reuse passwords. When signing up for a new service, click the Generate icon in the Keypher extension. You can customize length, symbols, and numbers. Keypher will generate a cryptographically secure random password and offer to save it instantly.

Seamless Autofill

When you visit a recognized website (e.g., github.com), the Keypher icon will appear inside the username/password fields. Click the icon, authenticate if the vault is locked, and select your credential. Keypher securely injects the data into the DOM.

5. Secure Sharing Protocol

Need to share a password with a colleague or family member? Keypher's Secure Sharing Protocol allows you to share credentials without exposing them to our servers.

  • Click the Share icon next to any credential in your vault.

  • A one-time symmetric key is generated locally on your device.

  • The credential is encrypted with this key and sent to our server with an expiration timer.

  • The decryption key is placed in the URL fragment (`#key=...`), which is never transmitted to the server. When the recipient opens the link, the decryption happens entirely in their browser.

6. Settings, Import & Export

You maintain absolute control over your data. In the Settings tab, you can perform bulk operations.

Export Vault

You can export your entire vault as an unencrypted CSV or JSON file at any time. This allows you to migrate away from Keypher freely.

Requires Master Password Verification

Import & Bulk Add

Migrating from LastPass, 1Password, or Bitwarden? Upload your CSV export file. Keypher will locally parse, encrypt, and bulk-save all your credentials into your new Zero-Knowledge vault.