AZET Pass

AZET Pass Help

AZET Pass is a password manager and authenticator. It is built from Bitwarden's open-source apps and syncs through our server at pass.azet.io. Your vault is encrypted on your device before it is synced; we cannot read it.

Getting started

  1. Create an account at pass.azet.io with your email. We send a confirmation link that works for 24 hours.
  2. Choose a master password. It unlocks your vault and cannot be reset by anyone, including us.
  3. Add logins in the web vault, or install the app on your phone and browser (downloads) and sign in with the same email and master password.
  4. Bring your passwords from another manager or browser with Import.

Account and master password

Your email is your sign-in name. Change it under Settings › My account › Change email: we email a code to the new address, and your master password re-encrypts your vault key for the new email.

If you set a master password hint when you signed up, Get master password hint on the sign-in page emails it to you. If you forget the master password itself, the vault cannot be opened; you can delete the account and start again.

Under Settings › My account you can also log out all sessions, purge the vault or delete the account.

Import

Go to Tools › Import data in the web vault, pick the format and upload the file. Common sources: Bitwarden (JSON or CSV), 1Password, LastPass, Keeper, KeePass/KeePassXC, Chrome, Edge, Firefox and Safari password exports, and many more in the format list.

Delete the exported file after importing: it is not encrypted.

Export

Tools › Export vault saves your items as JSON, CSV, or an encrypted JSON protected by your account key or a password you choose. Attachments are not included in exports; download them from each item.

Items and search

An item is a login, card, identity, secure note or SSH key. Use folders to group them and favourites to keep them at the top. The search box matches names, usernames, website addresses and notes. Deleted items stay in Trash for 30 days.

Verification codes (TOTP) are on the free plan: add the setup key to a login and the app shows the six-digit code with its countdown.

Autofill

Browser extension: open the extension on a sign-in page and pick the login, or use the keyboard shortcut (Ctrl/Cmd + Shift + L by default). Each saved website address has a match setting (base domain, host, starts with, exact, regular expression, never); the default is base domain. You can block autofill on chosen sites in the extension settings.

Turn off your browser's own password manager so the two do not compete (Chrome: Settings › Autofill › Password Manager; Firefox: Settings › Privacy › Logins and passwords).

Android: Settings › Autofill in AZET Pass sets it as the autofill service; inline suggestions appear on the keyboard where the app supports them.

Passkeys

AZET Pass can store passkeys for websites that offer them: when a site asks to create a passkey, choose AZET Pass, and the passkey is saved in a login item and synced, encrypted, to your other devices. Signing in to pass.azet.io itself with a passkey is not supported; use your master password.

Two-step login

Protect your account with an authenticator app (Google Authenticator, Microsoft Authenticator, Aegis, 2FAS and others): Settings › Security › Two-step login › Authenticator app › Manage, scan the QR code and enter the code it shows.

Save your recovery code from the same page. If you lose the phone with the authenticator, the recovery code turns two-step login off so you can sign in. Without it and without the device, we cannot turn it off for you.

Send

Send shares text or a file through a link that expires. You set the deletion date, an optional password, a maximum number of opens, and whether to hide your email. The content is encrypted in your browser; the key is in the part of the link after #, which never reaches our server. Text Send is free; file Send needs Premium. Files can be up to 25 MB.

If someone sent you a link, open it, enter the password if there is one, and view or download the content.

Attachments

With Premium you can attach files to items, up to 25 MB per file and 1 GB in total. Attachments are encrypted with the item. Very old attachments made without an item key show Fix in the item; fixing re-encrypts them with the item key.

Reports

Data breach report (free): checks your account email against known breaches. The lookup goes through our server to XposedOrNot, a free breach database; only the email address is sent.

Exposed passwords checks your passwords against Have I Been Pwned with k-anonymity: only the first five characters of each password's SHA-1 hash leave your device. Reused, weak, unsecured websites and inactive two-step login reports run on your device. Password health reports need Premium.

The browser extension can warn before you open a known phishing site, using a public list of phishing domains.

Encryption and keys

Your master password is stretched with PBKDF2-SHA256 (600,000 iterations by default) or Argon2id into a key that never leaves your device. Change the algorithm under Settings › Security › Keys. Changing it logs out your other sessions.

The fingerprint phrase (Settings › My account) is a sequence of words derived from your public key. Compare it when another device asks to approve a sign-in.

Rotating your account encryption key re-encrypts every item with a new key. Do it if you think your key was exposed; then log in again on every device.

Website icons

Item icons are fetched through pass.azet.io, so the websites do not see your IP address. Turn them off under Settings › Appearance › Show website icons.

Server

AZET Pass has one region: pass.azet.io, on Cloudflare Workers with a D1 database. It holds your email, a hash of your master password hash, the encrypted vault and, if you add one, your license key. Our server code is open source (MIT) on GitHub. The apps also let you enter your own self-hosted server address.

Browser requirements

The web vault needs a current browser with WebAssembly enabled: Chrome, Edge, Firefox, Safari or another up-to-date browser. Some locked-down or very old browsers turn WebAssembly off; enable it or use another browser.

Not included

AZET Pass is for individuals. These Bitwarden features are not part of AZET Pass, so the apps do not show them: organizations, sharing and collections, Families, emergency access, Secrets Manager, single sign-on (SSO), signing in with a passkey, and two-step login by email, Duo, YubiKey or security key. Use the authenticator app for two-step login.

Contact

Email hello@azet.io. Never send us your master password or recovery code: we will never ask for them.