Encrypted Vault
Keep your passwords, notes and secret codes in one safe place, on every device you sign in on. They’re locked on your device with a passphrase only you know — I can’t open them, and neither can anyone who breaks into my server.
The vault needs my server, which isn’t reachable right now.
A private place for your secrets
Logins, notes and API keys — encrypted in your browser with a passphrase only you know. I store scrambled data I can’t read, and sync it to every device you sign in on.
Step 1 of 2
Choose a vault passphrase
It encrypts everything in your vault. It’s separate from your account password, and I never see it — so I can’t reset it for you.
Step 2 of 2
Save your recovery key
If you ever forget your passphrase, this key is the only other way into your vault. Store it somewhere safe and offline — a password manager, or printed on paper.
Your vault is locked
How it works
- 1Make your vaultChoose a passphrase only you know.
- 2Add your loginsPasswords, notes and codes — locked on your device.
- 3Open it anywhereSign in on any device and unlock it with your passphrase.
Why can’t you open my vault?
Most online “vaults” keep the keys themselves, so they can read what you store. Here, the key is made and kept on your own device. If my database ever leaked, all anyone would find is scrambled data.
Turn on two-factor sign-in too, so nobody can even reach your vault without your phone.
For the technical folks
Your passphrase is turned into a key with 600,000 rounds of PBKDF2 in the browser; every item is encrypted with AES-256-GCM before it leaves your device. A random 256-bit vault key is wrapped by both the passphrase key and the recovery key.
More tools