Stated limits Coming soon
Before you put company credentials in it, read what it doesn’t cover
Kamzan Pass makes one promise: the server neither receives nor stores the keys. Passwords are encrypted and decrypted on your device. This page says the rest, so your IT team can decide with all the facts.
The design has not yet been reviewed by an external cryptographer
We say this first because it is the first thing to know: until that review exists, no sentence on these pages should be read as a third-party-verified guarantee. A serious IT team asks about limits before choosing a password manager, and it’s right to find them written here without searching. The Kamzan Pass guide lists them in full.
How it works
-
What it promises
The server neither receives nor stores the keys: it stores ciphertext and metadata. It doesn’t know item names, sites, usernames, passwords, codes, notes or the master password.
-
What the server sees
Who uses Kamzan Pass, which vaults exist, who belongs with what role, how many items they hold, when they change, and when and from where people connect. How many secrets and with whom, not on which sites.
-
What remains for you to do
Use the extension, a long master password, encrypted disks and locked devices. And have more than one administrator, so that someone is watching what the others do.
One promise, and the list of what it doesn’t cover.
What you can do
-
Web vault and extension aren’t the same
The server loads the web vault at each opening: whoever controlled it could serve a version that reads the master password. That’s true of every web-based manager. The extension’s code arrives signed by the browser store.
-
Company recovery is a form of access
If enabled, a custodian can open anyone’s account in the company. It stays on record, and the person is notified if they can still sign in. With two keys it takes two custodians, but two who collude can act alone.
-
Whoever saw a password knows it
Removing someone from a vault changes the keys and prepares the list of passwords to change, but doesn’t make them forget. They must really be changed on the sites. Anyone who can read an item can also copy it.
-
Trust at first contact
The first time you share with a colleague you trust that their key is theirs: Jinni presents it to you. From then on, if it changes, you see it. Anyone wanting certainty compares the fingerprint in person.
-
The device is out of scope
Malware or an over-privileged extension can’t be stopped from here. An unlocked, unattended device is an account handed over. If it’s stolen, disk encryption and a long master password are what count.
-
What hasn’t been tested yet
Microsoft or Google sign-in inside the extension. Autofill on real sites beyond the first step, including saving and time-based codes. The quantum-computing part is a design choice, not a guarantee.
Frequently asked questions
Can Jinni read my passwords?
The server neither receives nor stores the keys, so what it holds can’t be read. The limit is the web vault: the server delivers it, and whoever controlled that server could deliver a modified version. The extension is the most protected way to use Kamzan Pass.
Can the administrator see passwords?
Not simply by being an administrator: they don’t read vaults. But if recovery is on, the company can recover an account, and whoever administers decides who can become a custodian. In a company with one administrator, nobody else is watching.
What happens if the server is breached?
The server holds ciphertext and metadata, not keys. It can, however, refuse service, delete data, present an old state or loosen rules down to the minimums. A device that knew the newer state notices; a newly connected one doesn’t.
Will there be an external review?
There isn’t one today, and this page remains the reference: until one exists, nothing should be read as a third-party-verified guarantee. If your company has specific requirements, let’s talk before you adopt it.
The other Kamzan Pass features
Want to see it before it arrives?
We show you Kamzan Pass on a test vault: how a password is shared, what happens when someone leaves the company and what the server doesn’t see. Half an hour, no strings attached.
Alex