Inlockly walks you through setup right in the app - after you first sign in, you’ll see a welcome
screen and a “First steps” list that checks off tasks as you complete them. This guide covers
the same steps ahead of time: what to have ready, what to watch out for, and why each step matters.
Before you start
Have three things ready:
- an email address you can access - it will be your login and is used to confirm your account,
- an idea for your master password - the only password you’ll need to remember from now on
(more on choosing one in a moment),
- a place for your recovery key - a printout, a file somewhere safe, or a sheet of paper in the
drawer where you keep important documents.
The Free plan is enough to get started. It includes unlimited passwords, the
generator, autofill, and import on one device. You can change plans at any time - your data stays
in the vault.
Step 1. Create an account and choose a master password
Open the Inlockly app on your computer or phone, or go to the sign-up page, and choose “Register
now.” Enter your name (people you share a vault with will see it), your email address, and your
master password.
Your master password is special for two reasons. First, it never reaches our server - on your
device, the Argon2id algorithm derives a key from it that opens your vault. Second, that’s exactly
why we can’t reset it or remind you of it. A good master password:
- is long - ideally a phrase made of several random words, like
“trolley-tomato-evening-lantern”,
- is unique - you don’t use it anywhere else, not even in a modified form,
- isn’t based on your life - no names, dates, sports teams, or pets.
The strength meter on the form tells you whether your password is strong enough - it won’t accept
one that’s too weak. Finally, accept the terms and continue.
Step 2. Save your recovery key
Before your account is created, Inlockly shows you a recovery key - 28 characters in seven
groups of four. It’s the only way to recover your private vault if you ever forget your master
password.
- Choose Copy, Download, or Print, and keep the key outside Inlockly: a printout in
your documents drawer, a file on a USB drive, or another safe place.
- Don’t save it in the vault itself - if you forget your password, the vault will be locked.
- The key is checked on your device; only proof that you have it reaches the server.
Once your key is safe, confirm “I have saved my recovery key in a safe place” and create your
account. You can replace the key later in your account settings - the old one will stop working.
Nobody from Inlockly will ever ask for your master password or recovery key.
Treat any such request - by email, phone, or chat - as a phishing attempt.
Step 3. Confirm your email address
You’ll get a welcome email with a button to confirm your email address. Click it to activate your
account. Don’t see the email? Check your spam folder and tabs like “Promotions,” and if it’s not
there, request a new one when you try to sign in.
Step 4. Install the apps
Inlockly runs on all popular platforms and syncs your vault between them:
| Where |
What you install |
What it’s for |
| Computer |
App for Windows, macOS, or Linux |
Your full vault, import, settings |
| Browser |
Extension for Chrome, Firefox, Edge, Safari, or Opera |
Saving and filling in passwords on sites |
| Phone |
App for iOS or Android |
Your vault in your pocket, app autofill |
You’ll find every version on the Download page. After you install the extension, a
short guide opens: pin the Inlockly icon to your browser toolbar, sign in, and allow it to run
on websites - without that, the extension can’t suggest passwords.
How many devices? The Free plan works on one device - the desktop app, the
phone app, or the extension. Paid plans have no device limit and also give you access to your
vault in the browser, with nothing to install.
Step 5. Bring the passwords you already have
After you first sign in, Inlockly asks: “Already keeping passwords somewhere else?” Choose a
source:
- a browser - Chrome, Firefox, Safari, Edge, Opera,
- another password manager - 1Password, Bitwarden, LastPass, Dashlane, KeePass, and more,
- or “I’m starting fresh” if you’d rather add passwords as you go.
For each source, you’ll see export instructions. Inlockly recognizes the file format on its own,
shows a preview, and flags duplicates before anything is saved. If the export includes 2FA keys,
they come along with the passwords. You can come back to import at any time in Settings → Import
& export.
After importing, do two things: delete the export file (it contains passwords in plain text)
and turn off password saving in your browser - Inlockly takes over from here. You’ll find more
details in How to move your passwords to Inlockly.
Step 6. Turn on two-step verification
Your master password protects your data, and two-step verification (2FA) protects your sign-in:
even if someone learns your password, they can’t get into your account without the second factor.
Turn it on in your account settings, in the two-step verification section:
- email code - on every plan, including Free,
- authenticator app (such as Google Authenticator, Aegis, or 2FAS) - Personal plan and up,
- YubiKey hardware key - Personal plan and up,
- 10 backup codes in case you lose your phone or key - Personal plan and up.
Keep the code for your Inlockly account outside Inlockly - the app won’t accept the 2FA key for
your own account in the vault. The second factor has to be independent of what it protects.
Step 7. Sign in automatically
Now for the fun part. Go to a site where you have an account:
- Click the login field - the extension suggests matching accounts.
- Pick an account, and Inlockly fills in your username and password. If the item has a 2FA key
(Personal plan and up), it also enters the one-time code after the password.
- Creating a new account or changing a password? Use the generator and let Inlockly save the
new details.
Inlockly matches passwords to the site’s address, so it won’t suggest them on a fake site with
a similar name - one of the most effective protections against phishing.
On your phone, choose Inlockly as your password (autofill) provider in your system settings.
Then suggestions show up in apps too, and you can open your vault with your face or fingerprint
(biometrics on the Personal plan and up).
Step 8. Check which passwords need attention
After importing, open SafetyMeter™ (Personal plan and up). It flags passwords that are
weak, reused, or have appeared in known data breaches, plus accounts where you should
turn on 2FA. You don’t have to change everything at once - start with your email, your bank, and
the accounts you use to sign in to other services (like your Google or Apple account).
For families and teams: invite others
If you choose “With my family” or “At work or in a team” on the welcome screen, the “First
steps” list suggests a few extra tasks:
- Family - invite everyone at home to a shared vault. Each person has their own account and
private vault; the family only sees what goes into the shared one.
- Team and business - add your logo, create your first folder, invite people by link or email,
and approve new members (only then do they get the key to the company vault). On the
Business plan, create departments and assign them permissions.
You’ll find more about the plans on the Inlockly for families,
for teams, and for business pages.
All done - what’s next?
The “First steps” list in the app shows your progress on every device. Once everything is checked
off, you’ll see the message “All set - Inlockly is ready.”
Want to understand why all of this matters? Read our guide
Password management - how to protect your accounts at home and at work.