--- metadata: - name: generator content: Diplodoc Platform v5.50.2 alternate: - https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md - https://yandex.kz/support/browser-mobile-iphone/kk/security/passwords-management.md - https://yandex.kz/support/browser-mobile-iphone/ru/security/passwords-management.md - https://yandex.kz/support/browser-mobile-iphone/tr/security/passwords-management.md - https://yandex.kz/support/browser-mobile-iphone/uz/security/passwords-management.md --- > **Documentation Index:** Fetch the complete configuration index at https://yandex.kz/support/browser-mobile-iphone/en/llms.txt # Password encryption Hackers are trying to steal passwords in order to access your personal data or e-wallets. To prevent somebody from using stolen passwords, Yandex Browser stores passwords in the [manager](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords.md) in encrypted form. You can strengthen this protection with a master password. ## Password encryption in Yandex Browser{#passwords-crypt} The password vault is encrypted using the [AES-256-GCM](https://en.wikipedia.org/wiki/Advanced_Encryption_Standard) algorithm, which uses a [key](https://en.wikipedia.org/wiki/Key_(cryptography)). The AES-256 algorithm is considered reliable: the Department of Homeland Security in the USA recommends using it to protect Top Secret data. However, even the most complex encryption algorithm will not protect your passwords if a hacker learns the encryption key. [The master password](#master-password) allows you to securely protect the key. {% list tabs %} - Using a master password The key is encrypted using the [master password](#master-password). The master password is not stored on devices, so it can't be stolen. With a master password, you are protected in case that: - Theft of passwords stored on your smartphone. - Losing passwords if your smartphone is lost or stolen. - Synced data stored on Yandex servers (the encryption is set up so that even Yandex cannot decrypt your passwords). - Without a master password This option is less reliable due to the following risks: - Anyone who opens Yandex Browser for Mobile on your smartphone can view your passwords in the [manager](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-manager.md). - Your encryption key is protected by your operating system, rather than a master password. If hackers access to your phone, they can steal and decrypt your passwords. - Yandex can access your passwords during syncing. {% endlist %} ## Master password{#master-password} A master password provides additional protection for passwords. Yandex Browser will request a master password during an attempt to open the password vault or enter a previously saved website password in a login form. Instead of a huge number of passwords from websites, you will only have to remember one master password. Passwords from websites will also be more secure. Access to the vault is locked by the master password, which cannot be stolen, because it's not stored on devices. [Create a master password](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#create) [Change a master password](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#change) [Delete a master password](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#delete) [Time until password vault lock](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#time) [If you forget your master password](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#forget) ### Create a master password{#create} {% note alert %} Memorize the master password, do not write it down anywhere and do not show it to anyone. If you forget your master password, you can only restore your passwords if you have a [backup encryption key](#restore-key). {% endnote %} To create a master password: 1. Select ![](../_assets/3poloski-menu.png =22x) → **Settings**. 1. Tap **Create master password**. 1. Enter the master password. Create a [complex](https://yandex.com/support/passport/security.html#password-done-right) yet easy-to-remember password. 1. Tap **Create**. 1. Enter the master password again. 1. Tap **Create**. Now you will have to enter the master password to save a password for a site in Yandex Browser or open the [password manager](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-manager.md). The master password is not saved on your smartphone or on the server. Only a key [encrypted with it](https://yandex.com/support2/browser-passwords-crypto/en/with-master.html#procedure) is saved. ### Change a master password{#change} To change the master password: 1. Select ![](../_assets/3poloski-menu.png =22x) → **Settings**. 1. Tap **Change master password**. 1. Enter your current master password and click **Continue**. 1. Enter your new master password. We recommend using passwords that are [complex](https://yandex.com/support/passport/security.html#password-done-right) but easy to remember. 1. Then re-enter it to confirm. After that, the key encrypted with the master password [is re-encrypted](https://yandex.com/support2/browser-passwords-crypto/en/with-master.html#change) and transferred to your other devices during the next [synchronization](https://yandex.kz/support/browser-mobile-iphone/en/devices/sync.md). The master password is not saved on your smartphone or on the server. ### Delete a master password{#delete} 1. Select ![](../_assets/3poloski-menu.png =22x) → **Settings**. 1. Tap **Delete master password**. 1. Enter your current master password and tap **Continue**. After that, the browser will no longer request the master password to access passwords. At the next [synching](https://yandex.kz/support/browser-mobile-iphone/en/devices/sync.md), the master password is deleted from the other devices. ### Time to lock password vault{#time} Choose when Yandex Browser will lock the password vault and start requesting the master password during an attempt to access it: 1. Select ![](../_assets/3poloski-menu.png =22x) → **Settings**. 1. Tap **Confirm access when filling in saved passwords**. 1. Enter your current master password and tap **Continue**. 1. In the **How often** section, choose **After restart**, **After lock screen**, or **Never**. ### If you forget your master password{#forget} In this case, the only thing you can do is delete the passwords in storage and re-create the master password: 1. In the form where you enter your master password, tap **Forgot password**. 1. Tap **Delete passwords**. 1. If you have a passcode on your smartphone, enter it here. 1. [Re-create](https://yandex.kz/support/browser-mobile-iphone/en/security/passwords-management.md#create) your master password. ## Passcode, Touch ID, Face ID {#pin-fingermark-gesture} To avoid entering the [master password](#master-password) every time you unlock your smartphone, lock the device using one of the conventional methods instead (passcode, Touch ID, or Face ID). Your passwords in the storage will still be encrypted with the master password. Each time you unlock your device, the browser will restore your master password and then decrypt the password vault. If you delete your master password, the browser will no longer ask for your (passcode, Touch ID, or Face ID). To change the password unlock method: 1. Select ![](../_assets/3poloski-menu.png =22x) → **Settings**. 1. Tap **Confirm access when filling in saved passwords**. 1. Enter your current master password and tap **Continue**. 1. In the **Confirmation method** section, select the option you need. The options available depend on your smartphone model. #### Learn more - [Password encryption in Yandex Browser](https://yandex.com/support/browser-passwords-crypto/) Contact support