DocsUser GuideEditing and Updating Passwords
Editing and Updating Passwords
Change credentials safely, track versions, rotate after incidents, and keep URLs/TOTP/notes accurate. All edits happen locally and sync as encrypted updates across your devices and team spaces.
Quick Edit Flow
- Open a login → click Edit.
- Update fields (username, password, URLs, tags, notes).
- Use Generate to create a new password or passphrase.
- Save changes → confirm on the target website if rotating.
- Watch the banner for Version saved and sync status.
Tip: Use the side panel to preview an item while browsing its website.
Rotate a Password Safely
- Open the site’s account/security page in a browser.
- In bervice, open the login → Edit → Generate.
- Paste the new value into the site and confirm change.
- Back in bervice, Save the updated login.
- Invalidate old sessions/devices on the site if available.
After suspected exposure, rotate immediately and add an incident note.
Generator Settings
- Random: 16–24 chars, include digits & symbols.
- Passphrase: 4–6 words with separators for strict validators.
- Per-site rules: adjust length/symbol set; avoid ambiguous chars.
See Adding Passwords for generator tips.
Usernames & Aliases
- Store multiple identifiers (email, user ID) in fields.
- Use notes for account numbers or support PINs.
URLs & Matching
- Add precise domains/subdomains (e.g.,
https://app.example.com). - Include staging/SSO URLs to improve autofill suggestions.
TOTP & Backup Codes
- When a site rotates 2FA, rescan QR or paste new
otpauth://secret. - Attach updated recovery codes as a file or secure note.
Version History
- Every save creates a new version (timestamps & device ID).
- Restore prior versions without losing the current one.
- Use history to recover from accidental overwrites.
Security Audit & Hygiene
- Audit flags reused/weak passwords and missing 2FA.
- After edits, re-run audit to clear warnings.
- Schedule periodic rotations via Tasks.
Editing in Team Spaces
- Editors can update items; viewers cannot change secrets.
- Edits sync to all members; consider posting a change note.
- Use roles to limit who can rotate critical credentials.
Change Notifications
- Activity feed shows who edited what and when.
- Enable webhook notifications for critical items.
Bulk Updates
- Select multiple items → Bulk edit tags/space/URL domains.
- Use CLI for scripted rotations in CI/CD.
Attachments & Notes
- Attach updated recovery codes or policy docs.
- Use structured notes for rotation procedures & owners.
Troubleshooting
- Site rejects new password: Switch to passphrase or adjust symbols/length to match rules.
- Autofill offers old value: Refresh the page and confirm the updated URL list.
- Invalid TOTP after edit: Ensure device time sync; rescan QR.
- Conflicting edits: Resolve conflict dialog → keep newest / keep both.
- Restoring by mistake: Use Version History to switch back.
- More help: Password Issues