Using the [*Secrets*](https://apps.gnome.org//Secrets/) password manager you can:

Generate one-time verification codes for two-factor authentication.

<p>In Tails 7.6 (March 2026), we replaced the
<i>[[KeePassXC|https://keepassxc.org/]]</i> password manager with
<i>Secrets</i>.</p>

<p>You can open your previous <i>KeePassXC</i> database using <i>Secrets</i>,
because both <i>Secrets</i> and <i>KeePassXC</i> use the same file format to
store passwords.</p>

<p>If you miss more advanced features from <i>KeePassXC</i>, you can install
<i>KeePassXC</i> as [[additional
software|persistent_storage/additional_software]]</p>

To learn how to create a Persistent Storage, read our [[documentation on the Persistent Storage|persistent_storage]].

When starting Tails, unlock the Persistent Storage.

In Tails, choose **Apps&nbsp;▸ Tails&nbsp;▸ Persistent Storage**.

Verify that the Persistent Folder feature is turned on.

Create the safe as *Passwords.kdbx* in the *Persistent* folder.

The safe is encrypted and protected by a passphrase. In the configuration screen **Protect your safe**:

Specify a passphrase of your choice in the **Password** text box.

Type the same passphrase again in the **Confirm Password** text box.

Select **Create**.

<div class="caution">
<p>It is impossible to recover your passphrase if you forget it!</p>

<p>To help you remember your passphrase, you can write it on a piece of
paper, store it in your wallet for a few days, and destroy it once
you know it well.</p>
</div>

After creating the safe, select **Open Safe** and enter the passphrase again to unlock it.

If you have a safe named *Passwords.kdbx* in your *Persistent* folder, *Secrets* automatically displays a dialog to unlock it.

If you enter a wrong passphrase the following error message appears:

<p>You can also double-click your password safe from the <i>Files</i> browser
to open it using the <i>Secrets</i> password manager.</p>