How your data is protected

Musubi Vault encrypts on your device. Your master password never leaves it: your browser turns it into a key, slowly on purpose, and that key opens your private key. The server only ever holds your keys wrapped — encrypted — and your entries as ciphertext it cannot open.

What the server cannot see

• The content of your entries: passwords, usernames, notes, one-time codes.
• The URLs of your entries — which is why matching and searching happen in your browser.
• Your master password.

What the server does know

• Who you are: the identity you sign in with, and your email address.
• The names of accounts and collections, which are stored in the clear.
• Who has access to which collection, and with which permission.
• The activity log: who did what and when.

What follows from that

• Nobody can recover your master password, or open your vault without it.
• Sharing is done with keys: when you grant a collection, your browser wraps its key for the other person. Nobody decrypts anything on your behalf.
• Removing access stops future syncs, but a copy that already reached a device cannot be taken back. That is why the app asks you to rotate passwords.
• Each device keeps its own encrypted copy, per account.

What we collect and what we do not, including what the browser extension stores, is on the Privacy page.