Security that travels with you.
Your vault is sealed on your device with zero-knowledge encryption before it syncs anywhere. Here is exactly how, in plain language and in specifics.
Encryption happens before anything leaves you.
Zero-knowledge by architecture, not by promise. Here is the path your data takes.
On your device
Your master password is stretched into an encryption key that never leaves the phone.
Encrypted locally
Every login, code, photo, and document is sealed with 256-bit AES before it moves anywhere.
Synced as ciphertext
What we store and sync is an unreadable blob. We hold no key that opens it.
Six layers, all of them boring on purpose.
Well-reviewed primitives used the ordinary way. No in-house cryptography you would have to take on faith.
Zero-knowledge
Your master password never reaches us, so the key to your vault never exists on our side. No backdoor, no admin override, no exceptions.
310,000 PBKDF2 iterations
Your master password is stretched with PBKDF2-HMAC-SHA256 at the iteration count NIST recommends, with a per-account salt. Guessing it offline is deliberately expensive.
Encrypt-then-MAC
AES-256-CBC for confidentiality, HMAC-SHA256 over the ciphertext for integrity. Tampered data is rejected before it is ever decrypted.
Biometrics stay local
Face and palm templates are computed on the device and held in the app’s private storage, unreadable by any other app. They are never transmitted, never pooled, and never used to identify you.
Files never leave the device
Photos, videos, and documents you move into the vault leave shared storage for the app’s private area, behind your master password. They are not uploaded to us — and not into your gallery or downloads folder either.
Phone-approved desktop unlock
The browser extension cannot open the vault on its own. Each session is approved from your phone, so a compromised laptop is not a compromised vault.
Why the design is the guarantee.
Not a promise in a policy document — an architecture that makes the promise hard to break.
Encrypted before it leaves
Your vault is sealed on the device with AES-256. What syncs is ciphertext we have no key for.
Biometrics stay on the phone
Face and palm templates are generated and stored locally. They are never uploaded, shared, or used to identify you.
No recovery backdoor
We cannot reset your master password, because we never had it. That is the trade we made on purpose.
iOS, Android, and browser
A native app on both platforms plus a Chrome and Firefox extension that approves each unlock from your phone.
We never see your master password. Ever.
There is no admin override, no recovery backdoor, and no plaintext copy of your secrets on our servers. If we could recover your vault for you, so could anyone who compromised us. That is the whole point.
Frequently asked questions.
Your vault, your key. Start free today.
No card required. Upgrade to Premium only when you want the extras.