Access PassCryp on multiple devices
One vault, everywhere you sign in. Here is how to add new devices, recover access, and keep your sessions under control — without ever handing your master password to PassCryp.
1. How sync works
Your vault is end-to-end encrypted on each device before it leaves your browser. We sync only encrypted blobs through Lovable Cloud — your master password and decryption key never touch our servers. Any device with your account credentials and master password can decrypt the same vault.
2. Add a new device
Open passcryp.com on your new phone, tablet, or computer. Sign in with the same email and account password you use elsewhere, then enter your master password on the unlock screen. Your vault downloads and decrypts locally — no re-import needed.
3. Browser extension & mobile web
PassCryp runs in any modern browser (Chrome, Safari, Firefox, Edge) on desktop and mobile. Add the site to your home screen on iOS or Android for an app-like experience. The same sign-in + master password flow works everywhere.
4. Generate a recovery kit first
Before adding new devices, go to Settings → Recovery and download your recovery kit. Print it or store it offline. Because we have zero knowledge of your master password, the recovery kit is the only way to regain access if you forget it.
5. Emergency access for trusted contacts
Set up emergency access from Settings → Emergency Access. Trusted contacts can request access after a waiting period you choose. This is separate from device sync and protects against permanent loss.
6. Manage active sessions
From Settings on any device you can sign out the current device, or sign out of all sessions globally. Use the global sign-out if a device is lost or stolen — combined with a master password change, this fully locks attackers out.
7. Troubleshooting
"Incorrect master password" means the password you entered cannot decrypt the vault — re-check capitalization and keyboard layout. The vault auto-locks after 15 minutes of inactivity; just re-enter your master password. If a device shows stale data, refresh the page to pull the latest encrypted blob. Clearing browser storage signs you out but does not delete your vault.
8. Security notes
We cannot reset your master password — that is the point of zero-knowledge. Every device decrypts independently using Argon2id-derived keys and AES-256-GCM. See the security page for the full cryptographic model.