Frequently Asked Questions

Yes. SecurePassHub is 100% free forever. There are no paid tiers, no premium upsells, no credit card required, and no feature locked behind a paywall. Every feature — unlimited passwords, folders, team sharing, and AES-256 encryption — is included at no cost.

No. SecurePassHub has no hidden fees, no storage limits, and no usage caps. You can store as many passwords and folders as you need, add as many team members as you want, and use all features without any restrictions.

SecurePassHub was built with the belief that everyone deserves strong password security without paying a monthly subscription. Our mission is to make password management accessible to individuals and small teams who cannot afford expensive alternatives.

SecurePassHub uses AES-256 (Advanced Encryption Standard with a 256-bit key) to encrypt all passwords before they are stored. AES-256 is military-grade encryption trusted by governments, banks, and security agencies worldwide. Your passwords are encrypted on the server and can only be decrypted with the proper credentials.

No. SecurePassHub never stores your plain-text master password. Passwords are encrypted using AES-256 before being saved to the database. Your raw credentials are never retained in a recoverable plain-text form on our servers.

No. Your passwords are encrypted with AES-256 before being stored. The encryption design means that even SecurePassHub team members cannot read your stored passwords. Only you, with your authenticated session, can decrypt and view your passwords.

Yes. All data between your browser and SecurePassHub servers is transmitted over HTTPS using TLS (Transport Layer Security). This ensures your passwords and credentials are protected during transit and cannot be intercepted by third parties.

Because all passwords are encrypted with AES-256 before storage, a database breach would expose only encrypted data — not your actual passwords. An attacker would need to break AES-256 encryption to read your passwords, which is computationally infeasible with current technology.

Yes. SecurePassHub includes a full folder system. You can create unlimited folders, name them however you like (e.g., 'Work', 'Personal', 'Dev Servers'), and move passwords between folders at any time. Folders can also be shared with team members.

SecurePassHub supports multiple credential types: Web (websites and apps), SSH keys, Social media accounts, Computer/system credentials, and a General type for anything else. Each type has tailored fields to capture relevant information like hostnames, usernames, ports, and notes.

Yes. SecurePassHub includes built-in team sharing. You can share individual passwords or entire folders with other SecurePassHub users by entering their email address. Shared items are visible in the recipient's dashboard immediately. You retain ownership and can revoke access at any time.

Password transfer lets you permanently hand over ownership of a password or folder to another user. Unlike sharing (which keeps you as the owner), a transfer moves full ownership to the recipient. You initiate a transfer by entering the recipient's email, and once they accept, the item belongs to them.

Sharing gives another user read access to your password while you remain the owner — you can revoke their access at any time. Transferring permanently moves ownership to another user; after a transfer you no longer control the item. Use sharing for team collaboration and transfer for handing off a credential permanently.

Yes. You can revoke a user's access to any password or folder you own at any time. Once access is revoked, the item is removed from their dashboard immediately. This gives you full control over who can see your credentials at all times.

The SSH reminder feature automatically sends you a monthly email reminder to rotate (change) your SSH keys. SSH keys are long-lived credentials that are often forgotten — regular rotation is a security best practice. SecurePassHub reminds you so you never let SSH keys go stale.

Yes. SecurePassHub is a web-based application that works on any device with a modern browser — desktop, laptop, tablet, or smartphone. Your passwords are always in sync across all your devices because they are stored securely in the cloud.

SecurePassHub currently operates as a web application accessible from any browser on any device. A dedicated browser extension and native mobile apps are on our roadmap. In the meantime, the responsive web interface works well on mobile browsers.

Yes. SecurePassHub supports quick import from popular password managers. You can import passwords using standard formats such as CSV. This makes it easy to migrate from tools like LastPass, 1Password, Bitwarden, or any other manager that supports CSV export.

Yes. You can export all your passwords from SecurePassHub at any time. Your data is yours — you are never locked in. The export feature lets you download your credentials in a portable format so you can migrate to another tool or keep an offline backup.

Click 'Forgot password?' on the sign-in page. Enter your registered email address and SecurePassHub will send you a 6-digit verification code. Enter the code, then set a new password. The entire process takes under two minutes and does not require contacting support.

SecurePassHub supports three login methods: (1) Email + password — classic username/password login. (2) Email verification code — a 6-digit one-time code sent to your email, no password needed. (3) Google OAuth — sign in with your existing Google account in one click.

Yes. SecurePassHub supports TOTP-based two-factor authentication. After enabling 2FA, you will need to enter a time-based one-time password from an authenticator app (such as Google Authenticator, Authy, or 1Password) in addition to your regular login credentials.

Go to Settings → Security → Two-Factor Authentication. Click 'Enable 2FA', scan the QR code with your authenticator app (Google Authenticator, Authy, etc.), and enter the 6-digit code shown in the app to confirm. 2FA will be active immediately after confirmation.

SecurePassHub uses standard TOTP (Time-Based One-Time Password, RFC 6238), which is compatible with all major authenticator apps including: Google Authenticator, Authy, Microsoft Authenticator, 1Password, Bitwarden Authenticator, and any app that supports TOTP.

If you lose access to your TOTP authenticator app and are locked out, contact SecurePassHub support at the email address listed on our contact page. Provide your registered email and we will guide you through a secure identity verification process to restore account access.

SecurePassHub stores encrypted password data on secure servers. All passwords are encrypted with AES-256 before being written to the database, meaning the stored data is ciphertext — not readable without decryption. Our infrastructure uses industry-standard security practices.

When you delete your SecurePassHub account, all your passwords, folders, and personal data are permanently deleted from our servers. This action is irreversible. We recommend exporting your passwords before deleting your account so you have a local backup.

SecurePassHub is designed with privacy in mind and complies with GDPR principles including data minimization, purpose limitation, and your right to access and delete your personal data. You can request a data export or account deletion at any time from the Settings page.

No. SecurePassHub allows you to store an unlimited number of passwords and folders. There are no storage quotas, no per-password fees, and no limits on the number of team members you can share with. Everything is truly unlimited and free.

You can reach SecurePassHub support via the contact link in the website footer. We respond to all inquiries as quickly as possible. For account-related issues (locked out, 2FA problems, billing questions), please include your registered email address in your message.