Everything you need, nothing you don't.
Strong by default, private by design, and pleasant to use every day.
Privacy by design
The service is built so it can't learn anything about you, even if it wanted to.
Zero-knowledge encryption
Vault items are encrypted with AES-256-GCM on your device. The server stores only opaque ciphertext.
Passphrase accounts
Sign up with a generated 12-word passphrase. No email, no phone number, no personal data.
Blinded identity
Even your login handle is stored only as a salted hash, so the server can't enumerate or identify its users.
No tracking
No analytics, no third-party scripts, no telemetry. Nothing to leak.
Security
Modern, boring, well-studied cryptography, applied carefully.
Argon2id key derivation
Your master password is stretched with a memory-hard KDF, making brute-force attacks impractical.
Two-factor (TOTP and passkeys)
Turn on app-based 2FA or a hardware-backed passkey; logins then require a second factor.
Auto-lock
The vault locks itself after inactivity, clearing your keys from memory.
Open source and auditable
The full client and server are public, so you can verify the cryptography yourself.
Everyday use
Private should not mean painful. The day-to-day features are all here.
Browser extension
A popup vault for Chrome and Firefox that stays unlocked between uses.
Autofill with domain matching
Fill credentials on the right site only, with strict host matching that helps resist phishing.
Password generator
Create strong, unique passwords for every account.
Security check
Find weak, reused, and breached passwords. Breach lookups use k-anonymity, so your passwords never leave the device.
Every screen you use
Web vault, browser extension, desktop app, and an Android app, all end-to-end encrypted.
Self-hostable
Run the whole thing yourself from a single static Go binary.
Ready to try it?
Create a vault in your browser now, or grab the app for your platform.