G3NOSYSTEMS
MoatKey · Help

The Dungeon

Last updated October 2, 2026

The Dungeon is for the crown jewels: bank, payroll, domain registrar and admin accounts. Opening anything in it always asks you to prove it's you.

What the Dungeon does

  • Asks every time. Showing or copying a Dungeon item's password or other secrets needs your master password, every time. Android app You can use your fingerprint or face instead; the phone's PIN or pattern isn't accepted.
  • Never autofilled. The browser extension never fills a Dungeon item into a web page.
  • Never in a CSV export. The plain CSV export leaves Dungeon items out. The encrypted backup keeps them.
  • Never seen by Viewers. In a shared Castle, Viewers don't see Dungeon items at all.
  • Never sent with Secure Drop.
  • Logged. Each time someone opens or copies a Dungeon item, it is recorded in the Castle's activity log. If MoatKey can't record it, the item stays locked.

Move an item into the Dungeon

  1. Open the item.
  2. Choose Move to the Dungeon, and confirm.

In a shared Castle, only owners and Castle Admins can move items in and out. To take one out, choose Take out of the Dungeon. Dungeon items show a lock, and you can filter the list with 🔒 Dungeon.

Good to know

  • The Dungeon is enforced by MoatKey's apps and server, not by a separate key. Items in it are encrypted with the Castle's key like everything else.
  • Moving an item into the Dungeon doesn't take back anything a Viewer already saw or copied. Change that password at the service if it matters.