Keep passwords and secure notes
2 minute read · Cloud & Sync
Passwords & secrets is a private list for your own logins and notes, such as a work email password or recovery codes. Entries are encrypted with your Vault, synchronized to your other signed-in computers and visible only to your Vortex account.
- Open your secrets
- Add a password or note
- Copy and reveal values safely
- Edit, delete and conflicts
- What this list is not
Open your secrets
- Open the account menu at the bottom of the workspace rail and choose Passwords & secrets.
- Unlock your Vault if Vortex asks. The list cannot be read while the Vault is locked; see Vault unlock and recovery.
- Search with Search titles, usernames or websites…, or select an entry to see its details.
Use Refresh secrets to load changes made on another computer.
Add a password or note
Choose + Password for a login. Enter a Title, then any of Username or email, Website, Password and Notes. Generate creates a 24-character random password. Choose + Secure note for text such as recovery codes.
The title is required. Save the entry before closing; Vortex asks before discarding unsaved changes.
Copy and reveal values safely
Values are hidden until you select Show, and a revealed value is hidden again when the window loses focus. Use the copy action rather than selecting text. Vortex clears a copied value from the clipboard after 30 seconds, unless you copied something else in the meantime, and when Vortex quits.
Do not paste these values into a chat. There is no agent tool for reading or listing this list, and a message sent to a provider leaves your computer.
Edit, delete and conflicts
Edit an entry on any of your computers. If it changed on another computer first, Vortex shows This secret changed on another device. Reload it before editing. Reload and repeat your change instead of overwriting it.
Deleting asks Delete this secret from all your devices? Delete permanently removes it everywhere. An entry that this computer cannot decrypt is shown as Unable to decrypt — original data preserved; it is not deleted.
What this list is not
Passwords & secrets are separate from the credentials of saved SSH hosts, databases, FTP connections and API tools, which those tools use to connect. Entries here do not count toward any resource usage. Keep provider sign-ins in Settings → AI providers and website logins in browser profiles.