Log inJoin the waitlist

Search the help center, features, guides and more.

Password fixer

Find weak and leaked passwords. Fix them in a click.

Security shows which passwords need changing. In your browser, Fix password opens the site's change page, fills the old password and a new one, and saves the new one once you say the site took it.

The browser extension's Security tab, with Fix password beside a reused password.

How it works

Password fixer, step by step.

  1. See what needs fixing

    Passwords in known breaches, reused between sites, easy to guess, or sent without https.

  2. Press Fix password

    Vallkey makes a new password that follows the site's rules and saves it in the login, marked as not confirmed yet. Then it opens the site's change page, fills the old password and the new one, and sends the form.

  3. Confirm it worked

    Vallkey asks whether to update the saved password. Update makes the new password the login's, and the old one goes to its password history.

The details

What careful people ask.

Nothing is lost

The new password is saved before any page sees it. If a change breaks off halfway, it stays in the login, waiting, where you can copy it, and the item's history keeps every earlier version.

Only the login's own site

The passwords go only into a page whose address the login matches: never another site, another site's frame, or a lookalike. And only in the tab Vallkey opened, for 15 minutes, until the form is sent.

Change pages for 592 sites

A signed pack names where each site's change page is, drawn from Apple's public list. Elsewhere Vallkey opens the site's /.well-known/change-password address, which sites that support the standard send on to their own page.

When a page is unclear

Where the fields can't be told apart, Vallkey asks Chrome's built-in model, on your computer, which is which. It's given what the fields say, never what they hold, and nothing is sent anywhere.

In the apps

The web vault and the desktop and phone apps list the same passwords, with a Change password link to each site's change page.

What it doesn't do

It changes one password at a time, with you confirming each: it's guided, not unattended. Pages that ask for a one-time code, or build their form late, may need you to finish by hand.

Availability

Where you get it.

Plans
Every plan finds them; Premium and Families change them for you
Platforms
Every app; changes for you in the browser extension

Questions

Which plan has it?

Finding the passwords that need changing, and the link to each site's change page, are on every plan. Having Vallkey change them for you is in Premium and Families.

What if a site doesn't support the change-password address?

Its own page for a missing address opens instead, and you find the change page from there. Most large sites support it.

Does it work in every browser?

Yes, in Chrome, Edge, Firefox, Safari and the browsers built on Chrome. The on-device model that reads unclear pages is Chrome's alone, from Chrome 138, on computers that can run it.

Your passwords. Your keys. Your price.

Vallkey opens soon. Join the waitlist to hear first.