Pinzen FAQ

Pinzen stores website logins, passwords, PINs, payment cards, secure notes, custom fields, and one-time codes. Pinzen+ adds protected file attachments and more private or shared vaults.

The free plan includes one private vault on one trusted device, up to 1,000 items, passkey or Google sign-in, protected reveals, downloadable backups, and PWA installation. Pinzen+ adds automatic sync across approved devices. No credit card is required.

Pinzen+ lets an organizer create shared vaults for up to six people. Members receive encrypted updates, while each person's private vault stays separate. Organizers can remove a member and rotate the shared vault keys.

Not under the default recovery setting. Pinzen protects your vault on your device before it syncs, while your master phrase and Recovery Kit stay with you. If you choose Google recovery, Pinzen keeps a protected recovery copy and explains the added tradeoff before you enable it.

No. Adding and organizing items does not need approval. A passkey, hardware security key, authenticator code, or recovery code opens a ten-minute reveal window, so you can use several protected items without repeating the check for each one.

A trusted device opens with a passkey or authenticator—no master phrase or Recovery Kit. With Pinzen+, a new device can show a short pairing code; approve it from an existing trusted device, then enter only your master phrase. The Account Secret is encrypted directly to the new device and is never uploaded in readable form. The Recovery Kit remains the offline fallback.

No. Pinzen puts it and your one-time authenticator recovery codes into one Recovery Kit during setup. Keep that file private and separate from your master phrase; on a new device, you select the file and Pinzen reads it locally without uploading it.

Yes. The responsive web vault works on current iPhone, iPad, Android, Windows, macOS, Linux, and ChromeOS browsers. You can install the PWA for an app-like experience. Browser autofill depends on extension availability for that browser.

Support cannot see or reset it. You can create a new phrase yourself with the Recovery Kit plus a fresh code from the authenticator you connected during setup. A trusted device is another recovery path. Google users can optionally enable email recovery as a fallback, with the clearly displayed server-recovery tradeoff.