AltF Vault

How to create a strong master password

Your master password protects everything else, so make it long, random and memorable: a passphrase of six or seven randomly chosen words is a strong choice. Generate it rather than inventing it, write it down and keep that paper somewhere safe until you have typed it enough times to remember, and never use it anywhere else.

  • Free, no account
  • Encrypted on your device
  • Works offline
  • Not yet independently audited

How many random words

  • 5 words: about 55 bits. The minimum AltF Vault will accept is a Strong rating.
  • 6 words: about 66 bits. A good default for a vault.
  • 7 words: about 77 bits. Strong margin for backups stored in the cloud.
  • Words must be chosen at random by a generator. Song lyrics and quotes are not random.

Memorising it

  • Picture a scene that links the words in order.
  • Type it every day for the first two weeks; lock the vault often to practise.
  • Keep the paper copy at home, not in your wallet or phone case. Destroy it once you are confident.

What to avoid

  • Reusing it anywhere, especially your email password.
  • Names, birthdays, pets, places and fan references.
  • Short passwords with symbol swaps such as P@ssw0rd2026.
  • Storing it in the vault it unlocks.
Checking this browser for a saved vault...

How to create a strong master password: questions and answers

Can AltFTool reset my master password?

No. Nobody can. That is what makes the vault private, and why you should keep an offline note of the passphrase until it is memorised.

Should I change my master password regularly?

No. Change it only if you think someone saw it or it was used elsewhere. Frequent changes make forgetting more likely.

Is a long sentence I made up good enough?

Less so. People choose predictable sentences. A generator picking random words gives a known, high strength.

Can I use a passkey or fingerprint instead?

Not yet. Biometric unlock would need a separate key-wrapping design, which is not built.

Vault guides and features

AltF Vault homeThe vault, how it is built, what it cannot do and the FAQ.How the encryption worksThe full AltF Vault security design in plain English: PBKDF2-SHA-256 key derivation, AES-256-GCM, what is stored, and what it cannot protect against.Encrypted secure notesWrite encrypted notes in your browser: bank details, ID numbers, door codes and private lists, sealed with AES-256 on your device. Free and no sign-up.2FA recovery code storageStore two-factor backup and recovery codes encrypted on your device, tick off used codes and get warned when a set is running low. Free, no account.Password health checkFind weak, reused and years-old passwords in your vault, plus expired API keys and low recovery codes. Checked on your device, breach check optional.Encrypted backup and restoreDownload an encrypted backup of your AltF Vault, keep it in cloud storage or on a USB drive, and restore it on any device with your passphrase.Import passwords from CSVImport a password CSV from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password or LastPass into an encrypted vault. Read on your device, never uploaded.Offline password managerA free offline password manager that runs in your browser with no account or cloud. Encrypted on your device, works without internet after loading.How to choose a password managerA checklist for choosing a password manager: audits, encryption, recovery, sync, offline access, export and cost, with an honest look at where AltF Vault fits.

Free tools that work with the vault

AltFTool stores nothing from your vault. It is encrypted and kept in your browser; the only optional network request is the k-anonymity breach check.