What BotPass can see
The browser contacts your vault directly and decrypts it locally. Only a redacted index (item ID, title, site and username) and approved ciphertext are sent to the broker.
Reveals use RSA-OAEP SHA-256 and AES-256-GCM, bound to one request and recipient. The broker stores ciphertext until the agent claims it once or the request expires. It never receives your private key, master password or plaintext vault password.
Metadata is sensitive and is visible to the broker and the selected paired agent. It expires after 24 hours or when you lock the vault. Keep the unlock tab open.
Private beta: browser-owned pairing, no account sign-in/recovery or billing. PBKDF2 personal vaults only; no Argon2id, organization vaults, SSO, CAPTCHA or device verification. Native login requires vault CORS; password-protected encrypted JSON exports are also supported.
The served browser code, browser extensions, vault host and agent execution environment remain trusted. Single-use delivery does not prevent an agent or its provider from retaining plaintext after decryption. The obscure hostname is not authentication.