Passkey-X

Catch snooping with vault tripwires

Decoy logins that raise a critical alert the moment anyone opens, copies or fills them. Personal and above.

Steps

  1. Add a login nobody has a reason to open, with a tempting name such as "Payroll admin (old)" or "AWS root account", and let the generator fill the password.

  2. Open the login and choose Arm tripwire. Only owners and managers of the vault see this; everyone else sees a normal login.

  3. Don't open, copy or fill it yourself. If anyone does, on the web, desktop or Android, the owners get a critical alert by email and in Admin console › Security › Security alerts within seconds.

  4. In a personal vault, an alert means someone else is using your unlocked vault or a stolen session: lock all devices from Devices and change your passwords.

Good to know

  • The decoy stays end-to-end encrypted; Passkey-X only knows its id. Disarm it any time, even after your plan ends.
Open Passkey-X: Vault Full user guide (Word)