Settings

A tour of the Settings page, section by section, with links to the pages that cover each task in detail.

Settings has five sections, with a menu at the top to jump between them: Plan, Security, Vault data, Preferences and Account.

Settings is available once your vault is unlocked. Changes to security settings need a fresh passkey check, because being signed in is not enough. See Unlock your vault.

#Plan

The Plan card shows whether you are on Free or Solo and lets you upgrade, switch between monthly and yearly, and cancel. See Plans and Billing.

#Security

#Passkeys

Lists your passkeys with when each was added and last used. Add passkey adds another. Remove on a passkey asks for a passkey check, and the passkey stops unlocking your vault. You cannot remove your only passkey. If you have just one, the page warns you that your recovery key is then the only way back in, and suggests adding a second. See Passkeys.

#Recovery key

Generate a new recovery key replaces the key you saved at setup. The old key stops working as soon as the new one is created, and the new one is shown only once, so save it before choosing Done. It asks for a passkey check. See Recovery key.

#Unlock session

Your open StackHangar tabs share one unlocked vault, and locking in any tab locks them all. After a reload the vault unlocks again by itself until you have been idle for the time you choose, and for at most 12 hours. Under Lock when idle for, pick 5, 15, 30 or 60 minutes. The default is 15. Revealing a production secret needs a passkey check in that tab within the last 2 minutes. See Unlock your vault.

#Activity

A link to View activity log. See Activity log.

#Vault data

#Vault key

Rotate vault key makes a new key and re-encrypts everything on this device. Use it if a device, browser profile or recovery key may have been exposed while your vault was unlocked. It also issues a new recovery key and, if you leave Sign out every other browser and device ticked, signs out your other sessions. See Rotate your vault key.

#Record history

Every save keeps the version it replaced for 30 days so changes can be undone. The card shows how many of the 20,000 versions you have used. Free up space deletes versions saved since a day you choose, after a passkey check. You would use it if history becomes full, in which case saves are refused. See History.

#Export vault

Export vault downloads everything in your vault, decrypted on your device, after a passkey check. It works on any plan. See Export your vault.

#Preferences

#Appearance

Choose Match this device, Light or Dark. This is stored in this browser only and applies on this device.

#Email

Shows the email you sign in with and get alerts at. Change email asks for a passkey check, then sends a code to your current and your new address. Enter both to finish. The codes expire in a few minutes.

#Browser extension

Shows whether the extension is connected in this browser, with a link to get it from the Chrome Web Store. It works in Chrome, Edge, Brave and Arc on a computer. See Browser extension.

#Alerts

Alerts go to your sign-in email, and you are reminded 30, 7 and 1 days before something is due. This is fixed for now and cannot be changed. Alert emails never include names or secrets. See Expiry reminders.

#Account

Sign out locks your vault and signs you out of this browser.

The Danger zone has Delete account. See Delete your account.