Passkeys, built in
A WebAuthn authenticator lives inside Vault. Sign in to sites with a passkey — no password at all.
Vault keeps every password, passkey, and one-time code encrypted on your device with a single master key. Sync travels as an opaque blob — we couldn't read it if we tried.
Four layers stand between a secret and the world. Your master password is the only key, and it never travels.
The one secret only you know. Never stored, never sent — it lives in your head.
Your password is stretched into a key-encryption key. Memory-hard and GPU-resistant by design.
A random data key encrypts the vault; the KEK wraps it — so you can change your password without re-encrypting everything.
Every field is sealed individually with authenticated encryption. Tamper with a byte and it won't open.
This is the real thing — AES-256-GCM running in your browser via Web Crypto. Type below; nothing you enter leaves this page.
A fresh 256-bit key and random IV are generated locally for this demo.
A WebAuthn authenticator lives inside Vault. Sign in to sites with a passkey — no password at all.
TOTP 2FA in the vault. Scan a QR with your camera, or add an existing photo of the code.
Keep your recovery codes hidden as one block — masked until you need them, copied in a single tap.
Import from 1Password, Bitwarden, or CSV — every credential type, not just passwords.
A generator builds high-entropy passwords with a live strength read-out, tuned to each site's rules.
The browser extension fills logins and codes inline, and authenticates through the desktop app.
Choose one strong phrase. It derives every key in your vault and never leaves your device — so pick something you'll remember, because no one can reset it for you.
Logins, cards, secure notes, passkeys, 2FA codes, backup codes. Import the rest from your old manager in a few seconds.
Your encrypted vault follows you to desktop, iPhone, and your browser. The blob syncs; the key stays with you.
We built a manager we couldn't betray if we wanted to.Vault — a local-first manifesto
Creating a vault takes a minute. Trusting it takes reading the code — and we'd love for you to.