Secure your account

About ten minutes. At the end, your password vault holds your PurePost sign-in and passkeys, keeps them up to date on its own, and someone you trust can reach it in an emergency.

Your vault is encrypted on your device with a master password only you know. PurePost cannot see it, reset it or recover it. That is why steps 3 and 6 matter.

1. Install the Bitwarden app

   PurePost Vault works with the free, open-source Bitwarden apps. Install the browser extension on every computer you use, and the app on your phone, from bitwarden.com/download or your browser's or phone's app store.

2. Point it at your vault

   On the app's sign-in screen, open the region or server menu, choose Self-hosted, and enter this server address:

   https://vault.purepost.net Copy

3. Sign in with single sign-on and create your master password

   Choose Use single sign-on, sign in with your PurePost account, then create a master password. Use a passphrase of four or more random words you have never used elsewhere. Write it on your recovery sheet by hand, now. Do not type it into any website, document or note.

4. Save your PurePost sign-in in the vault

   With the extension signed in, sign out of your account and sign in again. When the extension asks Save login?, choose Save. From now on:

   • when you change your PurePost password, the extension asks Update password?, so the vault always has the current one;
   • when you add a passkey (Your account → Signing in), the extension can keep it in the vault, so it is on all your devices and survives a lost phone.

   The extension does this on your device, encrypted with your keys. Nothing is copied on our servers.

5. Add a second way to sign in

   Add a passkey or an authenticator app in Your account → Signing in. If offered, create recovery codes and write them on the recovery sheet too.

6. Name an emergency contact

   In the web vault at vault.purepost.net, open Settings → Emergency access and add someone you trust who also has a PurePost vault (for example a member of your family plan). Choose what they get (view, or take over) and a waiting period. If they ever request access, you get an email and can refuse during the wait; if you cannot answer, access opens when it ends. They never learn your master password.

7. Keep the recovery sheet safe

   Print the recovery sheet, fill it in by hand, and keep it where you keep important papers. It is the only copy of your master password.