Troubleshooting the credentials vault

The honest answer: your hyper-sensitive entries are irretrievably lost without the master password. There is no recovery, no admin reset and no operator backdoor; that is the core of the zero-knowledge promise in the credentials vault (Zugangsdaten-Tresor). All entries on the standard and sensitive levels are unaffected and keep working normally. Re-create the affected logins, ideally after rotating the password at the service in question.

The message reads: Der Code stimmt nicht. Prüfe die Uhrzeit deiner Authenticator-App. (the code does not match, check your authenticator app's clock). TOTP codes are time-based: if your device's clock is off by even a minute, the codes no longer match. Set the device time to "automatic" and try again with the next fresh code.

Three candidates, checked in this order: (1) the entry is personal and belongs to someone else, then it is invisible to you, admins included. (2) The entry is shared but not shared with you: as a member you only see your own entries plus what was granted to you; ask the creator for a share. (3) Your role may not open the vault; viewers have no access by default. Details: Audit and permissions.

External links expire after the chosen lifetime (7 days at most) or were revoked. An expired or revoked link cannot be reactivated: simply create a new link and send it again. How-to: Sharing.

The message means: a password requires an email or username. Entries of the type Passwort need at least one account detail so it is clear what the password belongs to. Fill in the E-Mail or the Username field (one is enough) and save again. Alternatively another type may fit better, for example Sichere Notiz (secure note).

That is the duplicate detection: an entry is skipped when the combination of title, URL, email and username already exists in the vault. The import never overwrites existing entries. If you want to update an entry anyway, edit it directly in the vault; if it should exist twice, change one of the four fields in the CSV before importing.

Reload the page and open the dialog again. A bug that temporarily prevented the dialog from loading has since been fixed. If the problem persists, contact support.

Deleted entries move to the trash and remain restorable until the retention period ends. Your admin sets that period in the tool settings under Papierkorb-Aufbewahrung (trash retention, 30 to 365 days). Ask your admin to restore the entry. After the period ends, the entry is gone for good.