possum

create a master password and save your recovery codes. this is a one-time setup before you add any logins.

save a username and password (and optionally a 2fa code generator) so it's a tap away the next time you need to sign in.

find the entry, decrypt it, paste it into the platform's login page. clipboard auto-clears after 30 seconds.

if you handle a client's gmail, facebook, or stripe on their behalf, link every entry to their dragonfly card so the full kit lives in one place.

for after a wrist-slap (you mistyped it into a chat, lent your computer to someone, etc.). possum re-wraps the master key under the new password — your individual entries don't move.

the recovery codes you saved at setup are your way back in. each can be used once. after recovery, possum gives you fresh codes.

the master password never leaves your browser. the server only ever sees encrypted blobs. that has consequences — both why it's safe and why we can't help if you forget.

possum auto-locks after a window of inactivity. you can also lock manually any time — one click and the master key clears from memory.

for a password rotation, an outdated url, or a login you don't use anymore. open the entry, edit any field, save. delete is permanent.

when a platform asks for a 6-digit code from your authenticator app, possum has it built in. paste the totp secret once at setup; possum generates the rotating codes from then on.

possum doesn't yet support csv import. for now, add entries one at a time as you encounter them — the day you log into stripe is the day stripe's entry gets added.

for client logins where two people on your team need access, today's pattern is: each person creates their own possum entry with the same credentials. true team-shared vaults (one entry, multiple users) are a future ship.