#Using the WebUI — the password vault (/passwords)

Any screen not listed here does not exist. Headings quote the screen's own wording.

Other topics: conversations, the input box, and sign-in: references/webui.md; settings, secrets, and browser logins the AI uses: references/webui-settings.md.

「パスワード」 keeps passwords and authenticator codes (TOTP) that people read and share. It is the first row of the sidebar's 「ワークスペース」 → 「ツール」 section, above 「ファイル転送」.

#Who can read it

Everything in a vault, including titles and URLs, is encrypted in the browser. While stored, the server, Samurai App operators, and the AI cannot read it. The AI has no way to use this screen, and MCP and the CLI are refused too.

Do not describe this as absolutely safe. If the server itself were tampered with, the code it delivers could capture a passphrase.

#「パスワード」 versus 「ブラウザ認証」 and 「シークレット」

• 「パスワード」: people read and share the values. The AI cannot use them.
• 「ブラウザ認証」 and 「シークレット」: the AI uses them without seeing the values. People cannot read them back.

The Chrome extension fills sign-in pages only for you (see 「Filling sign-in pages from the Chrome extension」). To let the AI sign in with a login you keep here, open the item and press 「ブラウザ認証へ写す」: check 「名前」 (the item's title by default) and 「ログイン画面の URL」 (its first URL), then press 「写す」. The ID and password are saved as a login only you use in 「ブラウザ認証」, so they move to where the server can read them. The copy does not follow later changes to the item; change or revoke it in 「ブラウザ認証」. The button appears only on login items that have both an ID and a password. Two-factor keys are not copied (see 「Two-factor codes during AI browsing」).

#First setup: 「パスワードを使う準備」

Set a passphrase of 12 characters or more in 「パスフレーズ」 and 「パスフレーズ(確認)」, then press 「次へ」. It is separate from your sign-in password, and each workspace has its own.

「緊急キットを保存してください」 shows your Secret Key and a recovery code. The recovery code is shown only once. 「緊急キットを印刷」 prints both on one page (choose "Save as PDF" in the print dialog to keep a file), with the sign-in URL, workspace, and email address and a blank box to write your passphrase by hand. Check 「緊急キットを保存しました」 and press 「設定を完了する」.

The Secret Key is a 128-bit key starting with SK1-, saved in this browser. Opening the vault takes both the passphrase and the Secret Key, so a leak of the server's data is not enough to try passphrases. Signing out does not remove it from the browser; do not open the vault on a shared computer.

#Opening and locking: 「パスワードを開く」

Enter the passphrase and press 「開く」. In a browser that does not have your Secret Key yet (a new computer, or another browser), a 「Secret Key」 field appears too: type it from your emergency kit (spaces, hyphens, and upper or lower case do not matter). It is saved in that browser once the vault opens.

The vault locks after 15 minutes without activity (the header shows 「あと N 分で自動ロック」), on reload, on sign-out, and with 「ロックする」. 「パスフレーズを変更」 changes the passphrase; the Secret Key and recovery code stay the same. 「Secret Key を表示」 shows the Secret Key saved in this browser and prints the emergency kit again (without the recovery code, which is only on the first kit). On a phone, 「Secret Key を表示」, 「パスキー」, 「パスフレーズを変更」, 「ロックする」 and 「インポート」 are icon buttons with the same names.

#Opening with a passkey: 「パスキー」

While the vault is open, press 「パスキー」, check the name (it defaults to the device and browser, such as 「Mac / Chrome」), type your passphrase (and the Secret Key if this browser does not have it), and press 「登録する」. The browser asks you to create a passkey and to confirm with your fingerprint, face, or device PIN. After that, 「パスワードを開く」 shows 「パスキーで開く」 above the passphrase field; it opens the vault without the passphrase or the Secret Key, also on another device that syncs the same passkey (iCloud Keychain, Google Password Manager, 1Password, and so on).

• The passkey must support the PRF extension. If it does not, registration stops with 「このパスキーはパスワードの解錠に対応していません」; use another password manager or keep using the passphrase.
• Up to 10 passkeys per person. Remove one with the trash button in 「パスキー」; then also delete the passkey named 「Samurai App パスワード保管庫」 from your password manager.
• Changing the passphrase keeps the passkeys. Re-creating the key (「自分用の保管庫を削除して作り直す」) removes them all.
• The Chrome extension does not open the vault with a passkey; use the passphrase there.

#Adding a Secret Key to an existing vault: 「Secret Key を追加します」

If you set up the vault before Secret Keys existed, the next time you open it you see 「Secret Key を追加します」. It shows a new Secret Key and a new recovery code; the old recovery code stops working. Save the emergency kit, check 「緊急キットを保存しました」, and press 「Secret Key を追加する」. Nothing changes until you press it, so closing the page leaves the vault as it was, and the step appears again next time. Shared vaults stay open as before.

#Forgot the passphrase

Press 「パスフレーズを忘れた」 (「パスフレーズか Secret Key を忘れた」 in a browser without your Secret Key).

• With the recovery code: enter 「復旧コード」 (spaces, hyphens, and upper or lower case do not matter) and a new passphrase, then press 「設定し直す」. Everything stays readable. The recovery code also restores your Secret Key and saves it in this browser.
• Lost the Secret Key but have a browser that still holds it: open the vault there, press 「Secret Key を表示」, and print the emergency kit again.
• Without it: press 「自分用の保管庫を削除して作り直す」 (under 「復旧コードがないときは」), then 「作り直す」 in 「鍵を作り直しますか?」. Your personal vaults are deleted and cannot be restored. For shared vaults, a manager of each vault must press 「〇〇に鍵を渡す」 again: the vault shows 「自分の確認コード」 (six groups of five digits), and the manager's 「〇〇に鍵を渡しますか?」 shows the same code. Read it to the manager by phone or in person; the manager presses 「同じなので渡す」 only when the digits match. If they differ, someone else may have re-created your key, so the manager should not grant it. This works only within 15 minutes of signing in; otherwise press 「サインインし直す」 first. Your sign-in email address gets a notice when the key is re-created.

Neither Samurai App operators nor workspace admins can recover a passphrase or open a personal vault.

#Vaults and items

• 「保管庫を作成」: next to the 「保管庫」 label above the vault selector, or in the middle of the screen before the first vault. Name it and choose 「共有」 or 「自分用」. The 「保管庫の操作」 menu (the ⋯ button next to 「メンバー」) holds 「ゴミ箱」 for everyone, and 「名前を変更」, 「エクスポート」, and 「保管庫を削除」 for managers only.
• 「新しい項目」: 「タイトル」, 「ID」, 「パスワード」, 「URL」, 「認証コードのキー」, 「メモ」. 「パスワードを生成」 makes a password of 16, 20, or 32 characters, optionally with symbols (「記号を含める」).
• Item types: choose 「ログイン」, 「メモ」, or 「カード」 when creating an item; the type cannot be changed later. 「メモ」 has only 「タイトル」 and 「メモ」. 「カード」 has 「名義」, 「カード番号」, 「有効期限」, 「セキュリティコード」, and 「暗証番号」; the number, security code, and PIN are hidden like a password. The list shows the cardholder and only the last four digits.
• 「欄を追加」: add your own fields to any item, each with a name and a value. Turn on 「秘密にする」 to hide the value like a password. Search matches field names and the values of fields that are not secret; hidden values (passwords, card numbers, secret fields) are never searched.
• 「タグ」: add tags to any item with 「タグを追加」 below 「タイトル」. Pick a tag already used in the vault or type a new one (up to 40 characters, 20 tags per item); 「タグ ○○ を外す」 removes one. Tags are stored inside the encrypted item, so Samurai App's servers cannot read them, but everyone who uses a shared vault sees the same tags. In 「保管庫ごと」 and 「すべて」, 「タグで絞り込む」 below the search shows only the items with one tag; the × on the chip clears it. It appears only when some item has a tag. The search also matches tags.
• Authenticator codes: paste the site's setup key or otpauth:// URL into 「認証コードのキー」. When the site shows only a QR code, press 「QR 画像から読み取る」 and pick a screenshot of it, or paste the image into the field; the image is read in the browser and never sent. Google Authenticator's export QR (otpauth-migration://) is not read. Keeping the code and password in one place puts both factors together.
• Viewing: passwords and other hidden values are hidden by default. 「パスワードを表示」 (or 「カード番号を表示」 and so on) shows one. 「パスワード」 and 「認証コード」 on each row of the list copy without opening the item; 「パスワードをコピー」 and the other copy buttons do the same inside the item. Either way the value is removed from the clipboard after 30 seconds.
• 「インポート」: reads a 1Password export (.1pux), a Bitwarden export (unencrypted .json or .csv), a 1Password or browser CSV (such as Chrome's), a Samurai App export (.json), or any CSV with headings such as title, URL, ID, password, and notes. The format is detected from the contents, and the file is read in the browser. Item types, cards, custom fields, and authenticator keys are kept. 1Password tags become tags, and a Bitwarden folder becomes one tag with the folder's name; in a CSV, a folder column becomes one tag and a tags (or 「タグ」) column becomes tags separated by commas. Before importing, it shows how many logins, notes, and cards it read, and how many attachments, passkeys, and trashed items it skipped. An encrypted Bitwarden export cannot be read; export again without encryption. Delete the original file and change the passwords afterward, because old versions and downloaded copies remain.
• 「エクスポート」 (in 「保管庫の操作」, vault managers only): saves one vault to a file. 「JSON」 keeps every field and can be imported back into Samurai App. 「CSV」 is for moving to another service; it holds only the title, first URL, ID, password, notes, and authenticator key, not cards, custom fields, or tags. You enter your passphrase again before saving. The export is recorded in the audit log. The saved file shows passwords in plain text; delete it when you are done.
• 「すべて」: a table of every item across the vaults you can open, like a spreadsheet: 「保管庫」, 「タイトル」, 「ID」, 「パスワード」, 「認証コード」, 「URL」, 「メモ」 (on wide screens only; open the item to read it otherwise), 「更新日」. Click a column heading to sort. The search also matches the vault name and tags. Passwords and authenticator codes stay hidden; each row can show or copy them, and only one value is shown at a time. 「メモ」 is shown as plain text. Click a title to open the item and edit it there; cells cannot be edited directly. New items and import stay in 「保管庫ごと」. Vaults you cannot open are not listed, only counted.
• 「点検」: checks every item in the vaults you can open, in four groups. 「漏えいしたパスワード」 lists passwords found in Have I Been Pwned's breach data; your browser sends only the first 5 characters of each password's SHA-1 hash and compares the rest itself, so the password never leaves the browser. It runs as soon as you open the tab; if the check fails, the other groups still show and 「再試行」 runs it again. 「弱いパスワード」 lists common passwords, passwords shorter than 8 characters, and passwords under 12 characters that use only one kind of character. 「安全でない URL」 lists URLs starting with http. 「カードの有効期限」 lists cards that have expired or expire within 30 days. Click an item to open and fix it; the results update when you save. Reused passwords are not checked.
• Logos: a login with an https URL shows that site's own icon in the list and the table; notes and cards show their type's icon, and other items show a lock icon. Your browser reads the icon directly from the site, so the URL does not pass through Samurai App's servers, and the site can see the request from your connection.
• Deleting an item (「項目を削除」) moves it to 「ゴミ箱」 for everyone who uses the vault.
• Deleting a whole vault (「保管庫を削除」, managers only) removes it from every member's list and moves it to 「削除した保管庫」, below the vault screen. It stays for 30 days with its members and items, then is deleted for good. Only managers see it there: 「元に戻す」 brings the vault back for every member as it was, and 「完全に削除」 deletes it with its items and history now; it cannot be undone. A manager whose key has not been granted again sees 「開けない保管庫」 and cannot press either. A vault left with no manager holding the key, deleted by a workspace admin, is gone at once.
• 「ゴミ箱」 (in 「保管庫の操作」): lists deleted items with who deleted them and how many days are left. Items stay for 30 days, then are deleted for good with their history. 「元に戻す」 (editors and managers) puts an item back in the list. 「完全に削除」 (managers only) deletes it and its history now; it cannot be undone.
• 「変更履歴」 (in an opened item): every save keeps the previous version, up to the last 20 per item. Each version shows when it was saved, who saved it, and which fields changed (for example 「パスワードを変更」), but not the values. 「中身を見る」 opens one version, and 「このバージョンに戻す」 (editors and managers) saves its contents as a new version, so the version you replaced stays in the history too.
• If someone else updated an item first, your edit is not saved. The latest version is shown; enter your change again.

Limits: up to 2,000 items per vault, 200 vaults you created, and 1,000 vaults you belong to. Items in the trash count toward the 2,000, and vaults in 「削除した保管庫」 count toward the 200 and the 1,000; press 「完全に削除」 to free one now. The whole workspace can hold 256 MB of items, vault names, trashed items, and history. When it is full, saving something larger is refused, but deleting and shortening still work; a save while full does not keep the previous version.

#Sharing: 「メンバー」

Add a person in 「追加する人」 and choose 「管理者」, 「編集者」, or 「閲覧者」. A person must finish first setup before they can be added.

To add a group, pick it under 「グループ」 in the same list (it shows how many people can be added, such as 「営業部(3 人)」) and press 「N 人を追加する」. Each current member of the group who has finished first setup and is not in the vault yet is added one by one with the chosen role; the count of members who have not finished setup is shown below the list. The vault is still shared with people, not with the group: someone who joins the group later is not added automatically, and removing someone from the group does not remove them from the vault. Add or remove them in 「メンバー」.

• 「閲覧者」 can read and copy, so they can still take a value elsewhere.
• 「〇〇を外す」 stops delivery to that person. They may have kept what they already saw, so change those passwords at each service.
• The last manager who still has the key cannot leave or be demoted.
• 「管理者の居なくなった保管庫」: workspace admins see vaults with no manager who holds the key, and can only delete them. They cannot read them.

#Filling sign-in pages from the Chrome extension

The password extension for Chrome types a saved login into the sign-in page you are on. It is a separate extension from the information-protection and meeting extensions, and the 「Chrome 拡張を接続」 button appears in the header of 「パスワード」 only where the extension is available. Install it from the Chrome Web Store: 「Chrome 拡張機能」 (/extensions) → the 「パスワード」 card → 「ウェブストアで見る」.

• Connect: open 「パスワード」, press 「Chrome 拡張を接続」, then 「接続する」, and sign in. Before you connect, the extension's popup says 「パスワード画面から接続してください」.
• Open: press the extension's icon (or Ctrl+Shift+L, Command+Shift+L on a Mac) and enter your passphrase. The first time, it also asks for the Secret Key from your Emergency Kit; the extension keeps it, like a browser does. A wrong entry shows 「パスフレーズか Secret Key が違います」.
• Fill: the popup lists the logins whose URL matches the site of the tab, matched the same way as two-factor codes below. Press one to type its username and password into the page. The copy button next to it copies the password instead.
• Two-factor codes: on a page that asks for a two-factor code (and has no password field), press the same item to type its current authenticator code. Items that have an authenticator code also show a clock button that copies the code. The setup key stays inside the extension; only the code goes to the page.
• Codes sent by email: open Gmail or Outlook on the web (outlook.office.com / outlook.live.com) in a tab with the inbox showing, then press 「メールのコードを入れる」 in the popup (it works while the vault is locked). The first time, Chrome asks to let the extension read Gmail and Outlook. The extension reads the top five messages of that inbox list, picks the newest one that looks like a sign-in code (preferring one that names the site), and types the code into the page's two-factor field. The popup shows which message it came from. Nothing read from the mail tab is sent to Samurai App. Other mail services are not supported.
• Suggestions next to the field: turn on 「入力欄の横に候補を出す」 at the bottom of the popup. Chrome asks to let the extension read all sites; turning it off gives that permission back. Afterwards, clicking a username, password, or two-factor field shows a small key button at its right edge; press it to list the logins for the site and press one to fill it, just like the popup. The list is drawn by the extension, so the page cannot read it. When the vault is locked, the list asks you to open it from the extension's icon instead.
• Save a new login: type your username and password into the sign-in page, open the popup, and press 「このページのログインを保存」. Check the title and username, choose the vault (only vaults you can edit are offered), and press 「保存」. The password is read from the page again at that moment and never appears in the popup. If the same username and password are already saved, the popup says so before you save. The new item gets the page's address as its URL.
• The vault stays open while you close and reopen the popup, and locks after 15 minutes without use, when you press 「ロック」, or when you quit the browser.
• It never types into an http page (「安全でない接続(http)のページには入力しません」), and it types nothing if the tab moved to another site after you pressed. A sign-in form embedded from another site (an iframe) is filled only after you turn on 「入力欄の横に候補を出す」, because that is when Chrome lets the extension read other sites; such logins show 「埋め込み: 」 under the ID so you can see where the value goes.
• The vault is opened inside the extension; the server still only sees sealed items. The only change the extension can make is adding a new item; editing, deleting, and sharing stay on 「パスワード」.

#Two-factor codes during AI browsing

When the AI's browser in a conversation reaches a page that asks for a two-factor code, a card 「 で認証コードを求められています」 appears in the chat. Press 「保存したコードを入れる」 (or 「パスワードを開いてコードを入れる」 while the vault is locked, then enter your passphrase): your browser tab finds the item whose URL matches the site and has an authenticator code, computes the current code, and types only that code into the page. If several items match, choose one.

• Items match by site: an item saved as github.com also matches accounts.github.com. Sites under shared hosting such as github.io or pages.dev belong to different owners, so a.github.io does not match b.github.io.
• The setup key never leaves your tab, and the AI never sees the code.
• It needs you to press the card, so it does not run in unattended triggers or schedules.
• It works in the cloud browser and in the browser on your own computer (samuraiapp tunnel or the Chrome extension). The code goes to the browser that showed the page, and only if that page is still on the same site. It also works after you pressed stop.
• An older samuraiapp or Chrome extension cannot type the code; the card asks you to update it.
• If no item matches, add the site's URL and 「認証コードのキー」 to an item in 「パスワード」.

#Audit log

The audit log records vault, item, member, and key operations by ID, including registering and removing a passkey (「保管庫のパスキーの登録」, 「保管庫のパスキーの解除」), including moving an item to the trash, restoring it (「保管庫の項目のゴミ箱からの復元」), and deleting it for good (「保管庫の項目の完全な削除」), and the same for a whole vault (「保管庫の削除」, 「保管庫のゴミ箱からの復元」, 「保管庫の完全な削除」). Showing and copying a password or another hidden value (including 「ブラウザ認証へ写す」) are recorded as reported by the browser, so this is not proof of who read a value. Typing a two-factor code from a conversation is recorded as 「保管庫の認証コードのブラウザへの入力」 with the conversation. Filling a page from the Chrome extension is recorded as 「保管庫の項目のブラウザ拡張での入力」, also as reported by the browser.