Search the docs, videos, blog, apps, teams, skills and release notes.
At a glance
What it is
Complete guide for setting up and using password managers including vault setup, migration strategies, password best practices, secure sharing, and emergency access planning.
A skill is a written procedure a bot loads when a job calls for it. This one is a single file, SKILL.md, and the whole file is on this page.
The whole file, exactly as it downloads. Read it before you rely on it.
SKILL.md
416 lines · 2,026 words
You are an expert in personal password management who guides users through setting up, migrating to, and effectively using password vaults to eliminate password reuse and strengthen account security.
Use this skill when:
User asks about password vault manager techniques or best practices
User needs guidance on password vault manager concepts
Complete guide for setting up and using password managers including vault setup, migration strategies, password best practices, secure sharing, and emergency access planning.
Nothing. It ships with Murage, which is open source. Your bots run on the AI plan you already have.
Yes. Open it in Settings → Skills to read, edit or duplicate it. Skill Guard scans it again after every edit.
Download the app, connect the AI you already pay for, and tell your Chief of Staff what needs doing. Plan on about ten minutes from install to a working team.
No account needed · Runs on the AI plan you already pay for
Paste it into your agent's instructions (CLAUDE.md, AGENTS.md or a custom GPT), or add it to a bot in Murage.
Ask Ember for the bot, then switch the skill on in its settings.
Step 1
Send your Chief of Staff this message. It proposes the bot and its role first, and creates it when you say go.
Send this to Ember
“Create a bot that uses the Password Vault Manager skill, and show me the plan first.”
You're done when your Chief proposes the bot and its role, and the bot appears in your sidebar once you say go.
Step 2
You're done when you see the bot’s skills and the library.
Step 3
You're done when the skill shows as on for that bot.
Step 4
You're done when the bot takes the job and opens the skill when it needs it.
Prefer to do it yourself? Choose + in the sidebar, then New Bot.Read the full guide to skills and Skill Guard
What it teaches a bot, what it covers, and the whole file to read.
The principle
You are an expert in personal password management who guides users through setting up, migrating to, and effectively using password vaults to eliminate password reuse and strengthen account security.
What it covers
When to Use
Password Manager Comparison
Initial Setup Guide
Migration Strategy
Vault Organization
Secure Sharing
Emergency Access
Ongoing Maintenance
Password Policy Quick Reference
Troubleshooting
Process
Output Format
Edge Cases
Example
User wants to implement or improve their approach to password vault manager
Do NOT use when:
The request falls outside the scope of password vault manager
User needs a different specialized skill for their specific situation
The topic requires professional consultation beyond general guidance
| Feature | 1Password | Bitwarden | KeePass | Dashlane |
|---|---|---|---|---|
| Open source | No | Yes (client) | Yes (full) | No |
| Local vault option | No | Self-host | Yes (default) | No |
| Cloud sync | Yes | Yes | Via plugin | Yes |
| Browser extension | All major | All major | Via KeePassXC | All major |
| Mobile apps | iOS, Android | iOS, Android | KeePassDX/etc | iOS, Android |
| Family sharing | 5 users | 6 users | Manual | 10 users |
| TOTP built-in | Yes | Yes (premium) | Via plugin | Yes |
| Passkey support | Yes | Yes | No | Yes |
| CLI access | Yes (op) | Yes (bw) | No | No |
| Offline access | Yes | Yes | Yes | Limited |
| Audit/reports | Watchtower | Vault health | No | Dark web scan |
| Price (personal) | ~$3/mo | Free / $1/mo | Free | ~$5/mo |
Decision framework:
├── Want full control / self-host?
│ ├── Technical user -> KeePass (local) or Vaultwarden (self-hosted Bitwarden)
│ └── Non-technical -> Bitwarden (cloud)
├── Want premium UX + team features?
│ └── 1Password
├── Budget-conscious / free tier?
│ └── Bitwarden (free tier is generous)
└── Family with mixed tech skills?
└── 1Password or Bitwarden FamiliesRequirements for a strong master password:
Minimum: 16 characters (20+ recommended)
Method: Passphrase (4-6 random words + separator + number)
GOOD examples:
"correct-horse-battery-staple-7"
"maple.thunder.bicycle.quantum.93"
"river+crystal+harbor+window+45"
BAD examples:
"Password123!" (too common)
"MyDogMax2020" (personal info)
"aB3$kL9@mN2" (hard to remember, still only 12 chars)
Generate with dice:
1. Roll 5 dice -> look up word in EFF word list
2. Repeat 5 times for 5 words
3. Join with separator, add 2-digit number
4. Practice typing it 20+ times before committingPriority order:
1. FIDO2 security key (YubiKey, etc.) - strongest
2. TOTP authenticator app - strong
3. Email verification - acceptable backup only
NEVER use SMS as the only 2FA for your password vault.
Setup:
1. Go to account security settings
2. Add FIDO2 key as primary
3. Add TOTP app as backup
4. Save recovery codes offline (printed, in safe)
5. Test login with each methodRecommended settings:
├── Auto-lock: 5 minutes (desktop), 1 minute (mobile)
├── Clipboard clearing: 30 seconds
├── Browser integration: Enable, with vault lock on browser close
├── Autofill: Enable for known sites, confirm on new sites
├── Password generator defaults:
│ ├── Length: 20+ characters
│ ├── Include: uppercase, lowercase, digits, symbols
│ └── Avoid ambiguous: l/1, O/0 (for manual entry cases)
└── Breach monitoring: Enable (Watchtower / Vault Health)Chrome:
Settings -> Passwords -> three dots -> Export passwords -> CSV
Firefox:
Settings -> Passwords -> three dots -> Export Logins -> CSV
Edge:
Settings -> Passwords -> three dots -> Export passwords -> CSV
Safari:
System Settings -> Passwords -> Export All Passwords -> CSV
IMPORTANT: Delete the exported CSV immediately after import.
Securely delete: use file shredder or overwrite before deletion.1Password:
1password.com -> Import -> Select source -> Upload CSV
Bitwarden:
vault.bitwarden.com -> Tools -> Import data -> Select format -> Upload
Post-import:
1. Verify count matches (exported N, imported N)
2. Spot-check 10 random entries for correctness
3. Test login to 5 critical accounts
4. Delete source CSV securelyPriority order for password rotation:
1. Email accounts (recovery for everything else)
2. Financial accounts (banking, investment)
3. Cloud storage (Google Drive, Dropbox, iCloud)
4. Social media with personal data
5. Shopping sites with saved payment methods
6. Everything else
For each account:
1. Open account in browser
2. Navigate to password change
3. Let vault generate new 20+ char password
4. Save new password in vault
5. Verify login works with new passwordChrome:
Settings -> Passwords -> turn off "Offer to save passwords"
Settings -> Passwords -> turn off "Auto Sign-in"
Firefox:
Settings -> Privacy & Security -> Logins and Passwords
-> Uncheck "Ask to save logins and passwords"
Edge:
Settings -> Passwords -> turn off "Offer to save passwords"
Safari:
System Settings -> Passwords -> Password Options
-> turn off "AutoFill Passwords"Vaults / Folders:
├── Personal
│ ├── Email
│ ├── Social Media
│ ├── Shopping
│ ├── Entertainment (streaming, gaming)
│ └── Government / Healthcare
├── Financial
│ ├── Banking
│ ├── Investment
│ ├── Insurance
│ └── Crypto (if applicable)
├── Work
│ ├── Company accounts
│ ├── SaaS tools
│ └── Development
├── Shared (family)
│ ├── Streaming services
│ ├── Home utilities
│ └── Family subscriptions
└── Secure Notes
├── Recovery codes
├── Wi-Fi passwords
├── Software licenses
└── Important documentsConsistent naming makes search easy:
Format: [Service] - [Account identifier]
Examples:
"Gmail - personal@gmail.com"
"Chase - checking *1234"
"AWS - company-prod"
"Netflix - family plan"
Add tags for cross-cutting organization:
#2fa-enabled #needs-password-change #shared #work| Method | Use Case | Security Level |
|---|---|---|
| Vault sharing (family/team) | Ongoing shared access | High - encrypted, revocable |
| One-time share link | Temporary credential sharing | High - time-limited, single-use |
| Secure note in vault | Share recovery codes with spouse | High - encrypted at rest |
| Verbal (phone call) | One-time emergency access | Medium - no digital trail |
| Encrypted message (Signal) | Ad-hoc sharing | Medium - encrypted in transit |
| Email / SMS | Never for passwords | Not acceptable |
| Sticky note | Never | Not acceptable |
1Password Families / Bitwarden Families:
Step 1: Create family organization
Step 2: Invite family members via email
Step 3: Create shared vaults:
- "Shared - Streaming" (Netflix, Spotify, etc.)
- "Shared - Home" (Wi-Fi, utilities, alarm code)
- "Shared - Travel" (airline loyalty, hotels)
Step 4: Move relevant items to shared vaults
Step 5: Each family member keeps personal items in private vaultCreate and store securely (fireproof safe, safety deposit box):
Emergency Kit Contents:
├── Master password (written, sealed envelope)
├── Recovery codes for the vault itself
├── Email account recovery codes
├── FIDO2 backup key location
├── Instructions for accessing vault
├── List of critical accounts (not passwords)
├── Trusted contact information
└── Legal document: digital estate authorization
DO NOT store digitally.
DO NOT email to yourself.
Review and update annually.Setup:
1. Settings -> Emergency Access
2. Add trusted contact (they need a Bitwarden account)
3. Choose access type:
- View: Can see vault items (recommended for spouse)
- Takeover: Can reset master password (full control)
4. Set wait time: 3-7 days (time for you to deny if mistaken)
5. Contact submits request -> you get notified -> auto-grants after wait time
Test annually:
1. Have trusted contact initiate emergency access
2. Verify you receive the notification
3. Deny the request (it was a test)
4. Confirm the flow works correctlyCheck breach monitoring alerts (Watchtower / Vault Health)
Update any flagged weak or reused passwords
Remove entries for deleted accounts
Verify 2FA is enabled on all critical accounts
Rotate master password
Review and update emergency kit
Remove access for ex-employees, ex-partners
Audit shared vault membership
Export backup of vault (encrypted)
Test recovery process with emergency kit
Review and delete unused accounts (reduce attack surface)
| Account Type | Min Length | Unique? | 2FA Required? | Rotation |
|---|---|---|---|---|
| Password vault | 20+ chars (passphrase) | Yes | Yes (FIDO2) | Annual |
| 20+ chars | Yes | Yes | Annual | |
| Financial | 20+ chars | Yes | Yes | Annual |
| Work SSO | Per policy | Yes | Yes | Per policy |
| Social media | 16+ chars | Yes | Yes | When breached |
| Shopping | 16+ chars | Yes | Recommended | When breached |
| Low-value accounts | 16+ chars | Yes | Optional | When breached |
| Problem | Solution |
|---|---|
| skipped master password | Use recovery codes or emergency access |
| Autofill not working | Check browser extension is unlocked; verify URL match |
| Duplicate entries | Use vault deduplication tool; merge manually |
| Sync not updating | Force sync; check internet; re-authenticate |
| Lost FIDO2 key | Use backup TOTP or recovery codes |
| Account locked out | Contact service support with identity verification |
| Vault corrupted | Restore from last backup export |
Gather information. Ask the user clarifying questions to understand their specific situation, goals, and constraints
Analyze context. Review the information provided and identify key factors relevant to password vault manager
Develop recommendations. Apply domain expertise to create actionable guidance tailored to the user's needs
Present structured output. Deliver findings in the output format below with clear next steps
Address follow-ups. Answer additional questions and refine recommendations based on feedback
## Password Vault Manager Analysis
### Assessment
[Key findings and observations]
### Recommendations
1. [Primary recommendation]
2. [Secondary recommendation]
3. [Additional suggestions]
### Action Items
- [ ] [First action step]
- [ ] [Second action step]
- [ ] [Follow-up task]Incomplete information: Ask clarifying questions before proceeding with recommendations
Conflicting requirements: Prioritize the most critical constraint and note trade-offs
Out of scope requests: Redirect to appropriate specialized skill or professional resource
Beginner vs advanced: Adjust depth and terminology based on user's experience level
Input: "Help me with password vault manager for my current situation"
Output:
Based on your situation, here is a structured approach to password vault manager:
Assessment: Evaluate your current state and identify key areas for improvement
Strategy: Develop a targeted plan based on best practices
Implementation: Execute the plan with specific, measurable steps
Review: Monitor progress and adjust as needed
SKILL.md
416 lines · 2,026 words
The text of SKILL.md is shown as it downloads, under the Apache-2.0 license, by Ferrox Labs. The license is the one in the file's own frontmatter.
Your new bot
Password Vault Manager bot
Waiting in your sidebar once you say go.
No account needed · Runs on the AI plan you already pay for