Encryption

We use a secure encryption standard called AES-256 (Advanced Encryption Standard) to help protect all the information in your vault in transit and at rest.

Vault Password

To use Avast Password Manager, you need to create a vault password to access your vault. We recommend that you create a unique password for your vault, which is different from the Avast account password that you use to log into your account. This adds an additional layer of security to your vault. Your vault password is never stored anywhere or sent to the server.

Zero-Knowledge Architecture

Our zero-knowledge architecture ensures that your data is encrypted before it leaves your device and can only be decrypted using your vault password on the devices where you use Avast Password Manager. This way, we make sure that no one except you can view your data – not even Avast.

Data Storage

Only encrypted data is stored on Avast servers. The encrypted data is then synced to any device where you access Avast Password Manager and sign in with your Avast account. To access the vault data, your vault password is required to decrypt all the information.

Two-Factor Authentication (2FA)

You can enable two-factor authentication (2FA) for your Avast Account to introduce a third layer of security to your vault. Once enabled in your Avast account settings, two steps are required when you sign into Avast Password Manager with your Avast account.

Brute force protection

Avast Password Manager includes measures to prevent brute force attacks, which are attempts to guess your password or login credentials. First, it includes a CAPTCHA mechanism to check if whoever is trying to sign in is a human. It also includes mechanisms to slow down automated brute force attacks on your Avast Account. Additionally, there is a "challenge mechanism" for your vault in place, which requires you to successfully enter your vault password before any encrypted data is transferred from the server.