Short answers to what people ask most. The details are in the docs and the privacy policy; anything else, write to sync@morphgate.com.
Security and your data
Can MorphGate read my hosts, passwords and keys?
No. Your vault is encrypted on your device before anything is written to disk or sent to a sync server, and only your devices hold the keys. Our server stores ciphertext it cannot read, and it never receives your master password or your recovery key. That goes for our staff too: there is nothing readable we could open, or hand over to anyone. How it works: Vault encryption.
What does the server know about me?
What it needs to run your account: your email address, your devices (name, platform, when they last synced), your plan, how much encrypted data you store and, in a team, your membership and the team's activity log. Not your hosts, usernames, keys, passwords or snippets. Choose Download your data on your account page to see everything it keeps.
What if your server is breached?
An attacker would get ciphertext, wrapped keys and a slow hash of each account's password proof, not the contents of any vault. To read a vault they would have to guess its master password, and every guess goes through Argon2id with 256 MiB of memory, which makes guessing slow and expensive. A long passphrase keeps that out of reach. The server can't change your items either: each one is signed, and your devices refuse anything tampered with.
Can MorphGate staff get into my account?
Staff see what the server keeps (address, devices, plan, storage sizes), never vault contents. At your request they can email you a sign-in link, sign your devices out or delete your account, and each such action is logged with their name. They cannot reset your master password or turn off your two-step verification, so a convincing email to support is not enough to take an account over.
I forgot my master password. Can you reset it?
No, because we never have it. Your recovery key, shown once when you created your vault, is the only way to set a new one. Keep it on paper or in another password manager. See Master password and recovery key.
How do I keep my account safe?
Use a long master passphrase and keep the recovery key away from your computer. Turn on two-step verification: signing in on a new device, and opening your account page with an emailed link, then also ask for a code from your authenticator app. Every new sign-in sends you an email, and you can sign devices out from the app.
Can my SSH keys stay in 1Password or Bitwarden?
Yes, on Linux and macOS. MorphGate signs in through your password manager's SSH agent (1Password, Bitwarden, KeePassXC or Secretive), so the private key never enters MorphGate's vault. See Keys in 1Password, Bitwarden and other SSH agents.
Who can open a team's shared vaults?
Only members an owner or admin has given access to. Each vault key is sealed to each member's own key in the admin's app, so the server cannot add anyone. When someone leaves, their access is revoked and the app asks an admin to rotate the keys of the vaults they could open. A team can require two-step verification; a Business team can also require single sign-on and approval of new devices.
Do I have to use your server?
No. MorphGate works without any account: the vault stays on your computer and the app sends us nothing, with no telemetry or analytics. To sync without us, run the open-source reference server yourself; it speaks the same protocol and stores the same ciphertext. See Self-hosting.
Accounts, teams and paying
Do I need an account, and what does it cost?
Only for hosted sync between your devices, or for sharing with a team. A new account starts with a 7-day free trial of hosted sync, no card needed. After that, Personal is a yearly plan and teams pay per seat. See Pricing.
Who pays for a team?
The team does, through its owner. Each team has its own subscription: per seat, at least 3 seats, yearly or monthly, bought and managed on the team's Billing tab of the website. A seat covers one confirmed member, so someone in two teams takes a seat in each.
I'm in a team. Do I need a Personal plan as well?
No. A seat in a team with a paid plan also syncs your personal vault, and your account page says so. You need Personal only when you aren't in a paying team.
Can I have more than one team?
Yes, and each one pays for itself. Only the first team you create starts with a free trial; the others need a plan from the start. You can own up to three teams without a paid plan.
What happens when a trial or plan ends?
Nothing is lost. Your devices keep everything and can still download from the server, but changes stop syncing until you subscribe; after a failed payment you have 14 days before that happens. An account or team without a plan that nobody uses for 12 months (24 months if it ever had a paid plan) is deleted, after emails 30 days and 7 days before.
How do I delete my account or my team?
On your account page, choose Delete your account. For your safety it asks that you signed in within the last 15 minutes, that you type your email address, and for your two-step code if you use one. A team's owner deletes the team from its page the same way. Any subscription is cancelled first, and the vault on your devices stays. See Delete your account.