Frequently Asked Questions

Very secure! Your data is encrypted right in your browser using AES-256 encryption (the same standard used by banks and governments) before it ever reaches our servers. This means we literally cannot see your passwords, notes, or any information you store. Even if someone broke into our servers, all they'd find is encrypted gibberish that's useless without your master password.

Unfortunately, there's no way to recover your data without your master password. This might sound harsh, but it's actually what makes Hexbon so secure — if we could recover your data, so could hackers. We strongly recommend: 1) Write your master password somewhere safe (like a physical notebook in a secure location), 2) Set up regular email backups so you always have a copy of your encrypted data, and 3) Consider using a memorable passphrase instead of a random password.

Absolutely! Go to your account settings and change it anytime. When you do, all your data gets re-encrypted with your new password right in your browser. The process is seamless and your data stays protected throughout.

Our decryption tools are 100% open source and available on GitHub. You (or any security expert) can inspect exactly how your data is encrypted and decrypted. We believe in transparency — there's no secret sauce or hidden code. The tools run entirely in your browser, meaning your sensitive data never touches our servers during encryption or decryption.

Nope! We have a strict zero-tracking policy. No Google Analytics, no Facebook Pixel, no Hotjar — nothing that watches what you do. We don't serve ads and we never share or sell your data to anyone. The only logs we keep are basic server access logs for security monitoring (like detecting attacks), and those don't contain any of your personal data.

Anything text-based that you want to keep private and organized! Common uses include:

• Passwords — Website logins, app passwords, WiFi passwords
• 2FA Codes — TOTP secrets for two-factor authentication
• Secure Notes — Private thoughts, recovery phrases, license keys
• Addresses — Shipping addresses, contact information
• API Keys — Developer credentials, secret tokens

Basically, if you can type it and want to keep it safe, Hexbon can store it.

Yes! Hexbon has a built-in 2FA/TOTP code generator. Just paste your TOTP secret when setting up two-factor authentication for any account, and Hexbon will generate the 6-digit codes for you. No need for a separate authenticator app like Google Authenticator or Authy — everything stays in one secure, encrypted place. Plus, unlike phone-based authenticators, you'll never lose access to your 2FA codes if you lose your phone.

Yes! When adding a password field, click the generator icon to create a strong, random password instantly. You can customize the length (8-128 characters) and choose to include uppercase letters, lowercase letters, numbers, and symbols. We also offer a free online password generator that anyone can use — no account required.

Yes! For developers, we offer a free UUID generator that creates universally unique identifiers in v1, v4, and v7 formats. Great for database primary keys, API identifiers, or any project needing unique IDs. Like all our tools, it's completely free with no signup required.

Need to share a password with a coworker or family member? Hexbon lets you share any piece of data securely with three options:

• One-Time Access — The link self-destructs after the recipient views it once. Perfect for sending sensitive credentials.
• Expiration Date — The link expires after a set time (15 minutes to 30 days). Good for temporary access.
• Persistent Links — The link stays active until you manually revoke it. Useful for ongoing shared access.

Here's the clever part: the data you share is encrypted with a brand new key — not your master password. You send the link to the recipient, then tell them the decryption key separately (via text, call, or in person). This way, even if someone intercepts the link, they can't read the data without the key.

Think of snapshots as "undo" points for your vault. Hexbon keeps up to 3 snapshots: one that you can create manually anytime, and two automatic ones that save before you make changes. Accidentally deleted important passwords? Made a mess while reorganising? Just restore from a snapshot and everything goes back to how it was. It's your safety net against mistakes.

Yes! We've built multiple redundancy options so you're never locked out of your own data:

• Email Backups — Get your encrypted data sent to your email regularly
• Mirror Sites — Our decryption tools are hosted on Cloudflare, Vercel, and GitHub
• Self-Hosting — Download and run the decryption tools on your own computer

Even if Hexbon.com disappeared tomorrow, you'd still be able to unlock your data using any of these options.

The free plan gives you 1MB of storage, which is more than enough for most people. To put that in perspective, 1MB can hold roughly 500-1000 password entries (depending on how many notes you add). For the average person storing passwords, a few credit cards, and some notes, you'll likely never hit the limit.

We support 8 popular OAuth providers: Google, Microsoft, Facebook, X (Twitter), LinkedIn, Discord, Yahoo, and GitHub. Just click your preferred provider and you're in — no need to create yet another password to remember! Your data is protected by your master password, which is separate from your login method.

Go to Account Settings and click "Delete Account." Your data will be permanently erased from our servers immediately — no 30-day holds, no hidden backups. Before we wipe everything, we'll email you a copy of your encrypted data so you can still access it using our open-source tools if you change your mind later. Once deleted, it's truly gone from our end.

Have a question or ran into an issue? Send us a message through our contact form and we'll get back to you as soon as possible. We read every message personally.