Encrypted by design
AES-256-GCM for content, Argon2id (RFC 9106) for key derivation, HMAC for filename obfuscation. Your master password never leaves the device.
End-to-end encrypted vault for passwords, 2FA codes, notes, attachments, and crypto seed phrases. Stored on your device. Synced — if you want — via your own Git repository.
Designed for people who'd rather not hand their secrets to a cloud password manager. Same convenience, none of the third-party trust.
AES-256-GCM for content, Argon2id (RFC 9106) for key derivation, HMAC for filename obfuscation. Your master password never leaves the device.
Stores credentials with custom fields, supports Google Authenticator-compatible TOTP codes, and imports your existing Google Authenticator export in one tap.
Attach screenshots, PDFs, or text files (security questions, bank code cards, ID scans). Preview them in-app — bytes never touch disk decrypted.
BIP39-validated seed phrases with paste-blocked entry, biometric-gated reveal, and screenshot-blocked viewer. Built for crypto users who currently keep seeds on paper.
Markdown notes with image attachments. Same encryption envelope as your passwords — anything you'd write in Apple Notes, but actually private.
Push your vault to any Git repository (GitHub, GitLab, self-hosted) using HTTPS + a personal access token. Or don't — local-only works perfectly.
We can't read your data — even if we wanted to. Here's the full picture.