Creating a keychain

To create a new keychain, select either "Create a new keychain" on the program's welcome screen or "File" → "New..." in the menu bar.

The "Create your keychain" window opens. Enter a name in the "Keychain name" field. The name "Backup" is not allowed.

Now choose a master password to protect access to your keychain. Since this master password gives access to all passwords and other data in the keychain, it is important to make it as strong as possible.

Note: Only you know the master password, and it is always required to access the contents of the keychain. Make sure you remember the master password and ideally also keep it in a safe place. If the master password is lost, there is no way to recover it, and we cannot reset it for you!

There are several ways to set a master password:

1. Type the password with the keyboard
   Enter the password in the "Master password" and "Repeat master password" fields and then click "Create keychain".
2. Have a password generated
   Click the "Generate password" icon (dice, far right in the "Master password" field).
   Choose the properties of the password. Enable at least one of the options offered. The more options you choose and the more characters the password has, the stronger it becomes.
   Then click "Next..." to generate the password.
   When prompted, move the mouse so that random values are collected for creating the password.
   The generated password is hidden. Click the button shown to display the password in plain text.
   Copy the generated password by clicking the "Save password to clipboard" icon on the far right and click "OK". The password is then entered in the "Master password" field automatically; paste it into the "Repeat master password" field (e.g. right-click → Paste).
3. Use the virtual keyboard
   You can also enter the password with the virtual keyboard. This is an extra safeguard against keyloggers that might record what you type.
   Click the virtual keyboard icon (second icon from the left in the "Master password" field). Enter your password with the virtual keyboard; it is entered in the "Master password" field. Then enter it again in the "Repeat master password" field.
4. Steganos PicPass
   Note: We recommend no longer using this method, as it no longer meets current requirements for a strong password. The option is only kept for compatibility.
   Click the "Use PicPass" icon (third icon from the left in the "Master password" field).
   A grid of 6x6 pictures or 6x6 symbols is shown.
   Click the pictures/symbols in any order. Then click "Repeat" and repeat the order you entered before.
   If you make a mistake, click "Reset" and start over.
   Once the password has the length you want, click "OK".
   The generated password is hidden. Click the button shown to display the password in plain text.
   Click "OK" to enter the password in the fields.

In all four cases, the strength of the password is shown below the "Master password" field as a bar rated "Very weak", "Weak", "Reasonable", "Strong" or "Very strong".

Storing the password on a key device (e.g. a USB stick)

Under "More options" you can also store the password on a USB stick. The keychain then opens without entering the password whenever that USB stick is connected.

Note: In this case, too, make sure you remember the chosen password or keep it in a safe place. Otherwise, if the USB stick is damaged or lost, there is no way to decrypt the keychain!

Two-factor authentication

Two-factor authentication can no longer be set up for new keychains. Existing keychains with two-factor authentication still open; after the master password, you are asked for the 6-digit code from your authenticator app.

Note: Keep the code or QR code that was shown when the second factor was set up in a safe place. If you lose the device, you need this QR code to set up the second factor again. There is no other way to set it up again or reset it.

Unlocking with Windows Hello

If your PC supports Windows Hello, you can enable "Unlock with Windows Hello" when creating the keychain and from then on unlock it with your face, fingerprint or PIN. You can also switch the option on or off later in the settings under "Keychain". Your master password stays valid; for security reasons the Password Manager asks for it from time to time. Windows Hello cannot be combined with a key device.