What a vault stores
A password vault is a locked container for the details you use to sign in. Rather than holding dozens of separate logins in your head, you protect a single entry phrase and let the vault recall everything else. The container travels with you, so the information is there whether you are at a desk or on a phone.
A vault usually keeps more than plain passwords. It can also hold the little extras that go with an account, so nothing important is spread across notes and drawers.
- Usernames and passwords for each service you use
- Notes, account numbers and answers to security questions
- Entries generated for you that are long and hard to guess
- A record of which login belongs to which website
Web access explained
A vault can sit as a program installed on one computer, or it can be offered as a service you open in a browser. Web access means you reach your vault through a page you sign in to, rather than through software tied to a single machine. Your entries are still yours, and they are still protected, but the door is now on the web.
The practical effect is freedom of place. Once you are signed in, the vault can be opened from a laptop you borrow, a work computer or a phone, because the browser is the only tool it needs.
- Reach your logins from any device that runs a browser
- Keep one place to update a login when it changes
- Avoid installing the same software on every machine
- Get a consistent view across operating systems and browsers
What to look for
Most vaults cover the basics, so the differences sit in the details. The features below are the ones people tend to care about most once they use a vault every day.
- Entry generation that creates a fresh, strong phrase for each account
- Fill in support that signs you in without retyping
- A second step at sign in, such as an app or a hardware key
- Sharing with a small, chosen group when a real need exists
- A clear path to recover access if you lose your main key
- Plain explanations of how the service protects your data
Choosing with care
Because a vault gathers so much of your digital life, it deserves more thought than an ordinary app. Take a little time with the questions below before you commit.
- How does the service protect the one key that opens everything?
- What happens if you forget your main phrase?
- Which features sit in the free plan and which sit in the paid one?
- How are updates delivered, and is support easy to reach?
- Does the provider explain its choices without heavy jargon?
A helpful rule of thumb: if a service cannot explain its security in words you understand, that is information in itself. Move on to one that can.
Habits and next steps
The tool is only half of the story. The way you use it decides how much it helps. These habits take very little effort and repay the time many times over.
- Give every account its own separate entry
- Make the main phrase long and memorable to you alone
- Turn on a second step wherever a service offers it
- Accept updates when your vault prompts you
- Treat public networks with extra care
- Review old and unused logins now and then
If you suspect a login has leaked, change it first, then change any account that reused it. Warnings about unusual sign ins are worth reading rather than dismissing.
A vault lowers your risk. It does not remove it. The habits around the tool matter just as much as the tool itself.
Sources and further reading
For anyone who wants to go deeper, these public bodies and projects publish reliable material on passwords, accounts and web security.
- The National Cyber Security Centre offers plain UK guidance for homes and small organisations.
- The Cybersecurity and Infrastructure Security Agency publishes advice and alerts for a wide audience.
- Have I Been Pwned lets you check whether an address has appeared in a known breach.
- The OWASP Foundation shares open guidance on application and account security.
- The National Institute of Standards and Technology sets out widely used standards, including on digital identity.
This guide is general information, written in everyday language. It is not legal or professional security advice, and it cannot account for the details of your own setup.