en	[[!meta title="Managing passwords using the Secrets password manager"]]

en	Using the [*Secrets*](https://apps.gnome.org//Secrets/) password manager you can:

en	Store many passwords in an encrypted database, called a *safe*, which is protected by a single passphrase of your choice.

en	Always use different and stronger passwords, because you only have to remember a single passphrase to unlock the entire safe.

en	Generate very strong random passwords.

en	Generate one-time verification codes for two-factor authentication.

en	<div class="note">
ar	<div class="bug">

en	In Tails 7.6 (March 2026), we replaced the [[KeePassXC|https://keepassxc.org/]] password manager with Secrets.

en	You can open your previous KeePassXC database using Secrets, because both Secrets and KeePassXC use the same file format to store passwords.

en	If you miss more advanced features from KeePassXC, you can install KeePassXC as [[additional software|persistent_storage/additional_software]]

en	</div>

en	Creating and saving a password safe

en	Follow these steps to create a new password safe and save it in the Persistent Storage for use in future working sessions.
ar	Befolgen Sie diese Schritte, um eine neue Passwortdatenbank zu erstellen und für die zukünftige Verwendung im beständigen Speicherbereich zu speichern.

en	To learn how to create a Persistent Storage, read our [[documentation on the Persistent Storage|persistent_storage]].

en	When starting Tails, unlock the Persistent Storage.

en	In Tails, choose **Apps&nbsp;▸ Tails&nbsp;▸ Persistent Storage**.

en	Verify that the Persistent Folder feature is turned on.

en	To open *Secrets*, choose **Apps&nbsp;▸ Accessories&nbsp;▸ Secrets Password Manager**.

en	To create a new safe, select the **New Safe** button.

en	Create the safe as *Passwords.kdbx* in the *Persistent* folder.

en	The safe is encrypted and protected by a passphrase. In the configuration screen **Protect your safe**:

en	Specify a passphrase of your choice in the **Password** text box.

en	Type the same passphrase again in the **Confirm Password** text box.

en	Select **Create**.

en	<div class="caution"> <p>It is impossible to recover your passphrase if you forget it!</p>

en	<p>To help you remember your passphrase, you can write it on a piece of paper, store it in your wallet for a few days, and destroy it once you know it well.</p> </div>

en	After creating the safe, select **Open Safe** and enter the passphrase again to unlock it.

en	Restoring and unlocking a password safe

en	Follow these steps to unlock a password safe that is saved in the Persistent Storage from a previous Tails session.

en	In Tails, choose **Apps&nbsp;▸ Accessories&nbsp;▸ Secrets Password Manager**.

en	If you have a safe named *Passwords.kdbx* in your *Persistent* folder, *Secrets* automatically displays a dialog to unlock it.

en	Enter the passphrase for this safe and select **Unlock**.

en	If you enter a wrong passphrase the following error message appears:

en	Failed to unlock Safe.

en	<div class="tip">
ar	<div class="bug">

en	You can also double-click your password safe from the Files browser to open it using the Secrets password manager.

en	Using Secrets as an authenticator app for two-factor authentication

en	Many websites offer two-factor authentication as a safer method than using just a password. For example, you can configure an authentication app, like Google Authenticator, to generate a one-time code of 6 digits when signing in to a website.

en	You can use *Secrets* to generate such one-time codes in Tails. The technology used to generate these codes is called [[!wikipedia time-based one-time password]] (TOTP).

en	To configure two-factor authentication for an entry in your password safe:

en	From the website or application for which you are configuring two-factor authentication, identify the *secret* that you need to generate the one-time codes. This secret is a string of characters that is often provided together with a QR code.

en	In the *Secrets* password manager, select the entry of your safe for which you want to configure two-factor authentication.

en	At the bottom of the right pane, select **Show More**.

en	In the new options that appear, enter the secret from the website or application in the **One-Time Password Secret** text box.

en	A one-time code appears above the **One-Time Password Secret** text box.