Install KeePassXC
Download only from the official project, install it, and create a strong master password that is never entered on this website.
Official KeePassXC downloadDostBridge security utility
Your passwords stay encrypted on your device.
KeePassXC opens the vault locally. This server stores only the encrypted database and never receives your master password.
Consent first: KeePassXC-Browser asks before adding or updating a login. If you decline, nothing is saved.
Windows onboarding
Set up this machine
Install browser integration
Install KeePassXC-Browser from your browser's official extension store. In KeePassXC, enable browser integration and pair the extension.
Official setup documentationEnroll the DostVault sync client
Download the Windows client package, verify its SHA-256 value, then run its installer in PowerShell. The administrator supplies a revocable device token.
Download Windows client 0.1.0Create and open the encrypted vault
Create DostVault.kdbx at the path shown by the installer. Thereafter use Open-DostVault.ps1 so the client safely pulls, opens, and synchronizes it.
What is automatic
Browser login prompts
- Offer to add a new login after submission
- Offer to update a changed password
- Fill only after you unlock and authorize KeePassXC
What stays manual
Sensitive and non-browser secrets
- SSH private keys and recovery codes
- RDP, server, database, and application secrets
- Anything you deliberately decline to store
Rotation workflow
Previously exposed credentials
Import only if needed, add the tag rotation-required, change the credential at its source, then remove the tag after validation.
Diagnostics
Connection or synchronization problem?
- Run
Test-DostVaultClient.ps1. - Confirm Windows time and HTTPS access to this domain.
- Do not overwrite a conflict file; keep both copies and merge in KeePassXC.
- Ask the administrator to revoke and replace a lost or expired device token.