Have a question or found a bug? We're here to help. Fill out the form below and we'll get back to you as soon as possible.
Yes. Base-2-Pass uses industry-leading encryption (XChaCha20-Poly1305) with Argon2id key derivation. All encryption happens locally on your device, and your master password never leaves your browser. Even with cloud sync enabled, our servers only store encrypted data we cannot read. See our detailed FAQ for more information.
No. Due to our zero-knowledge architecture, we have no way to recover, reset, or bypass your master password. This is a security feature, not a limitation. Your master password is the only key to your encrypted data, and we never have access to it. Please store your master password securely.
Go to Settings > Backup & Restore > Import from CSV. We support imports from Chrome, Firefox, LastPass, Bitwarden, Norton, and generic CSV formats. Export your passwords from your old manager as a CSV file, then import it into Base-2-Pass.
Go to Settings > Backup & Restore > Export Vault. This creates an encrypted backup file that you can use to restore your vault or transfer it to another device. Your data belongs to you, and you can export it at any time.
Yes! Base-2-Pass is open source. You can review the code, contribute improvements, or fork it for your own use. Transparency is important for security software.
Your data remains safe. Your vault is stored locally on your device and works offline. You can export your data at any time. Being open source means the code remains available even if the project is discontinued.
If you've discovered a security vulnerability, please report it responsibly. Do not disclose security issues publicly until we've had a chance to address them.
For security-related reports, please email us directly at security@base-2.dev with:
We take security seriously and will respond to legitimate reports within 48 hours.