{
  "product": "Specification (reference)",
  "title": "Password Manager",
  "summary": "Hold every credential — where the security model is the product.",
  "category": "apps",
  "entries": [
    {
      "path": [
        "AI",
        "Crypto",
        "Zero-knowledge: the vault key never leaves the client"
      ],
      "value": "",
      "status": "yes",
      "note": "the defining property"
    },
    {
      "path": [
        "AI",
        "Crypto",
        "Key derivation with a modern KDF and high cost"
      ],
      "value": "Argon2id or scrypt",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Crypto",
        "Authenticated encryption of the vault"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Vault",
        "Entries with username, secret, URL, notes, custom fields"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Vault",
        "Folders, tags and favourites"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Vault",
        "Password history per entry"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Vault",
        "Secure attachments"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Access",
        "Unlock by master password and biometrics"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Access",
        "Auto-lock on idle, sleep and lock screen"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Access",
        "Second factor on the account itself"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Generation",
        "Configurable password and passphrase generation"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Generation",
        "TOTP codes stored and generated"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Filling",
        "Autofill matched by origin, not by page text"
      ],
      "value": "",
      "status": "yes",
      "note": "the phishing defence"
    },
    {
      "path": [
        "AI",
        "Filling",
        "Never fill across a different origin silently"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Health",
        "Weak, reused and breached credential reporting"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Sharing",
        "Share an item without revealing the vault key"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Recovery",
        "Emergency access and documented account recovery"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    },
    {
      "path": [
        "AI",
        "Portability",
        "Full export, and import from the major competitors"
      ],
      "value": "",
      "status": "yes",
      "note": ""
    }
  ]
}