Zero-knowledge encryption — your keys, your vault

Your Digital Life.

Secured Beyond Imagination.

Store passwords, IDs, cards & more with zero-knowledge encryption.AES-256-GCM + PBKDF2-SHA256. 26 credential types. Zero plaintext, ever.

💳Cards

🛂Passport

📶Wi-Fi

🔐SSH

🔑Password

🏦Bank

🪙Crypto

🖥️Server

Get Started Free See Features

Scan to Install

iOS & Android

256-bit

AES Encryption

Zero

Plaintext stored

Credential types

5ms

Avg. unlock time

Security without compromise

Every decision we've made has been in service of one goal: keeping your data yours.

Zero-Knowledge Architecture

Your master password never leaves your device. AES-256-GCM encryption ensures only you can ever decrypt your vault.

26 Credential Types

Passwords, bank accounts, crypto wallets, passports, SSH keys, healthcare records, receipts and more — all in one vault.

PBKDF2 + AES-256-GCM

Industry-standard PBKDF2-SHA256 key derivation combined with AES-256-GCM authenticated encryption. Every item individually protected.

Sync Everywhere

Seamless encrypted sync across iOS, Android, web, and desktop. Your vault follows you everywhere.

Biometric Unlock

Face ID, Touch ID, and Android Fingerprint. Fast access with zero-compromise security.

Secure Recovery

SMS, email, and recovery codes. Never lose access to your vault, even if you forget your master password.

Store anything securely

26 credential types. One encrypted vault. Beautifully organised.

🔑

App Passwords

💳

Payment Cards

🏦

Bank Accounts

🪙

Crypto Wallets

🔐

SSH Keys

🛂

Passports

📶

Wi-Fi Passwords

🪪

ID Cards

⚕️

Healthcare

📝

Secure Notes

🧾

Store Receipts

⚙️

API Keys

Encryption Architecture

Zero knowledge.
Zero trust.

Your master password derives your encryption key entirely on your device. We receive only an authentication token — never your password, never your plaintext data.

Master Password Entry

You type your password. It never leaves your device.

PBKDF2-SHA256 Key Derivation

Industry-standard KDF produces your master key locally — never transmitted.

AES-256-GCM Encryption

Every credential encrypted before any network call.

Encrypted Sync

Only ciphertext reaches our servers. We see nothing.

// Client-side only — server sees none of this

masterKey = pbkdf2(password, salt, SHA-256)

vaultKey = AES.decrypt(encVaultKey, masterKey)

ciphertext = AES.encrypt(credential, vaultKey)

// What the server stores:

db.store({ ciphertext, iv, authTag })

// ↑ unreadable without vaultKey

🔑

Key Derivation

PBKDF2-SHA256

🔒

Encryption

AES-256-GCM

🛡️

Auth Token

HMAC-SHA256

🌐

Transport

TLS 1.3

Simple, transparent pricing

Start free. Upgrade when you need more.

Free

$0forever

5 vault items
All 26 credential types
AES-256-GCM encryption
Web vault access
Email recovery

Get Started Free

Starter

$2.99/month

20 vault items
Everything in Free
iOS & Android apps
Device sync
Priority support

Start Starter

Pro

$4.99/month

50 vault items
Everything in Starter
TOTP / 2FA auth
Audit log
Secure sharing

Go Pro

Business

$9.99/month

Unlimited vault items
Everything in Pro
Family sharing (5 users)
Import from all managers
Dedicated support

Go Unlimited

All plans include SSL/TLS, GDPR compliance, and 99.9% uptime SLA. Accept USD, EUR, GBP, AUD, CAD and 135+ currencies.

Available everywhere

iOS, Android, Web, Windows, macOS, Linux.

Download the mobile app

Scan the QR code or tap a badge to install