Whatever happens online, you won't panic.

No. Your vault is encrypted on your device with a master key we never receive. What reaches our servers is scrambled text we have no way to open. If someone stole our whole database, they would get nothing readable.

Because a password you rarely use is a password you forget, and one more thing that can leak. You sign in with a six digit code sent to your email, and add an authenticator app if you want a second layer. The only password in your life here is your vault master key.

We cannot recover it, and that is the point. Anyone who could reset it could also read your vault. So we give you two safety nets: an optional hint you write yourself, which we can email you, and an encrypted backup you can download any time. Without the key, a reset means starting fresh.

We send the first five characters of a hash, never the password. The breach database returns thousands of possible matches and the comparison finishes on our side without your password ever leaving your vault. Checks run daily, and we email you the day something appears.

Yes, and it is who we built it for. The assistant answers in plain words. The exposure reports say what was found, why it matters, and what to do about it, in that order. You will not need to know what a hash is to use any of it.

You give it one thing: an email, a name, a username, a phone number, a photo, or a domain you own. It works out what that is and runs the right checks. Breach records, public profiles across a dozen platforms, hidden location data in photos, exposed documents, leaked config on public code sites. You get a report with every link it found, so you can keep digging yourself.

Only things you own or have written permission to test. Scanning other people's systems is illegal in most places, so we ask you to confirm authorisation and we hold you to the scope you declare. Checking your own email, name or username needs no permission at all.

Nothing is deleted. Your entries stay encrypted exactly as they are, but you cannot open the vault until you renew. Download an encrypted backup before you cancel and you keep a copy you can restore any time. Cancel from your billing page whenever you like.

Because your phone's manager is locked to your phone. Apple Keychain works on Apple, Samsung Pass works on Samsung, and the day you switch phones, lose one, or need a password on a work laptop, you are stuck. ZeroPanic lives in the browser, so it opens on any device, any platform, anywhere you can log in. On top of that it watches for your passwords appearing in breaches, holds your API and SSH keys, stores cards, PINs and notes in the same place, and shows you what strangers can already find about you. That is the rest of the job.