Oxy PasswordHelp centre · In developmentProtect and find your logins.
Confirmed features, security practices and procedures for the version in development.
What to know before launch.
This documentation reflects behaviour currently implemented in the code.
How do I create my vault?
Enter your name and email, then choose a master password of at least 10 characters or Windows account protection. Save the one-time recovery code.
How is the vault protected?
Content is locally encrypted with AES‑256‑GCM. Password keys use scrypt derivation; the Windows option uses secure system storage.
What does MFA do?
TOTP MFA adds a six-digit code from a compatible authenticator such as Microsoft Authenticator or Google Authenticator.
Which backup options exist?
Chrome import, Excel export and an encrypted backup that can be password protected.
Can the extension always access the vault?
No. The Chrome/Edge bridge is authorized after unlock and revoked when the vault locks or the app closes.
What if I lose my master password?
Use the recovery code. Email delivery is not available yet; Oxygen DW cannot decrypt the vault without the password or code.
Detailed guide
Setup, credentials, generator, MFA, backup and safe practices.