Watchtower
Continuously audits your vault for leaked, reused, and weak passwords and other risks.
Watchtower scans every item in your vault and surfaces the security risks and maintance issues that quietly accumulate over time, so you can fix them before they become a problem. The audit runs continuously and groups its findings, letting you focus on the issues that matter most and resolve them one by one.
What it checks
- Pwned (leaked) passwords
- Reused passwords
- Vulnerable or weak passwords
- Inactive two-factor authentication
- Inactive passkeys
- Unsecured websites (http://)
- Duplicate items
- Incomplete items
- Expiring items
Selecting any category opens the affected items, where you can update a password, switch a site to https, or clean up duplicates directly. The Watchtower guide documents every check and how each one respects your privacy.
Clean up duplicates
When Watchtower flags duplicate items, you can resolve them on the spot: pick the copies and choose Merge into…, and Keyguard reconciles them into a single entry — see bulk actions for the merge editor.
