Passwords and passkeys

Acira has a built-in password manager. It saves sign-ins on this computer, encrypted, for each profile. Nothing is synced or sent anywhere, and there is no Acira password. To see, copy, edit or export a password, Windows or macOS checks that it is you.

Save a password

1. Sign in to a website as usual.
2. If the sign-in works, Acira shows Save password? under the right end of the address field. It shows the site, your username and the password as dots.
3. Choose Save. Choose Never for this site to stop being asked there. Close the prompt to skip it this time.

If you sign in again with a new password for a saved username, the prompt reads Update password? and the button reads Update. A short message confirms Password saved or Password updated.

• The prompt appears after the sign-in has really worked, and not before. A failed attempt shows nothing.
• It is drawn by Acira, not by the page, and it names the real site.
• When a page asks you to create a password, Acira can offer Use a strong password.

Fill a password

Click or focus a sign-in field. A list of saved sign-ins for that site appears. Choose one. Acira fills the form after you choose a row, never on its own when the page loads.

• A saved https sign-in is never offered on an http page.
• A sign-in saved for a site can appear, as a separate labelled row, on another address of the same site when both use https.
• The top page is filled. Forms inside embedded frames are ignored.

Manage saved passwords

Open Settings › Passwords.

The list marks passwords Weak, Reused or Fair, and a line above it counts them, or says All {count} look strong. This check runs on this device.

A password you reveal hides again after 20 seconds. A password you copy is cleared from the clipboard after 30 seconds if the clipboard still holds it. On Windows the copy is kept out of clipboard history and the cloud clipboard. On a Mac it is an ordinary clipboard item, so a clipboard manager may keep a copy after the 30 seconds.

The check that it is you

These actions ask your computer to verify you before they run: showing a password, copying a password, editing an item, exporting to a CSV file and Delete all passwords. These do not: seeing the list of sites and usernames, copying a username, saving a new password, deleting a single saved item, importing, and filling a form.

The prompt names what it is for, for example Show a saved password in Acira. Acira never sees your Windows or Mac password. After a successful check the actions stay available for 60 seconds, then ask again. If verification cannot run, the action is refused. It never falls back to allowing it.

Import and export

Import from another browser

1. In Chrome, Edge, Brave or Firefox, export your passwords to a file. Open Settings › Import & export › Bring your passwords for the steps for each browser.
2. In Acira, open Settings › Passwords › Import and export and choose Import… next to Import from a CSV file.
3. Choose the file. A preview counts new, updated, already saved and skipped items. Choose Import.
4. Delete the file afterwards. Acira offers a Delete the file link once the import is done, because the file holds every password in plain text.

The file can be up to 8 MB and 20,000 rows. It needs a website column and a password column. Acira does not read another browser's password store directly. See Bring your data.

Export

Choose Export… next to Export to a CSV file. Acira verifies you, then warns that the file will hold every password in plain text. Keep it somewhere safe and delete it when you are done.

Delete all

Delete all passwords removes every saved password from this profile after verification and a second click on Delete all. Sites you chose Never for this site for stay as they are. It cannot be undone.

Passkeys and security keys

Passkeys are not stored in Acira's vault. They stay with your operating system. On Windows, the switch is Settings › Privacy › Passkeys and security keys and it is off by default. When it is off, sites use your password instead. Turn it on to let sites ask Windows for a passkey or security key, then reload pages that were already open. See Privacy settings.

On a Mac, this switch does not control passkeys. They go through macOS by a separate path, and they may not be available in every Mac build.

Extension password managers

You can use a password manager extension instead. Bitwarden, 1Password, Proton Pass and LastPass install in Acira, open their own sign-in screens and run on web pages. Signing in and filling have not been confirmed for each of them, so check yours before you rely on it. You sign in inside the extension's own popup and Acira never sees your vault. Extensions do not run in private windows or tabs, Tor tabs or locked workspaces. See Extensions.

Limits

• Passwords are not available in private windows or private tabs. Nothing is saved or filled there.
• Passwords are kept for each profile. The vault holds up to 10,000 items.
• If Windows or macOS cannot provide secure storage, Acira refuses to store passwords. There is no plain-text fallback.
• If your Windows account changes, a vault copied to another account cannot be opened. Acira never creates a new key over existing passwords.
• Locked workspaces and the Tor vault use the same Windows Hello check. They have no separate Acira code either. See Locked workspaces.

Last updated October 31, 2026