// zero-knowledge · encrypted on-device · yours alone
Your passwords, sealed on your device.
A zero-knowledge password manager. Logins, notes and cards are encrypted before they ever leave your device — the server only ever holds ciphertext.
// how it works
Three steps, no trust.
Choose one master password
It derives your encryption keys in WebAssembly, on your device. We never see it, so we can never leak it.
Everything encrypts locally
Logins, notes and cards are sealed with XChaCha20-Poly1305 before they sync. Search and filtering happen over decrypted state on your device.
Recover on your terms
A printed recovery code plus control of your email — not the server — is the way back in if the password is ever forgotten.
// under the hood
Nothing to hide, everything to audit.
The whole design assumes the server is curious. Keys are derived and used inside a Rust core compiled to WebAssembly, on your device — what leaves it is ciphertext the server can store but never open.
01 · kdf
Argon2id
128 MiB · 3 iterations · derived on your device, never sent
02 · aead
XChaCha20-Poly1305
Fresh nonce per item · AAD binds ciphertext to id:type:version
03 · core
Rust → WASM
Keys live in wasm memory, zeroized on lock — no export returns key bytes
04 · recovery
Two-slot wrapping
Master password and printed recovery code unwrap the same vault key
05 · storage
Postgres + RLS
Ciphertext-only columns · row-level security · soft deletes, no DELETE grant
06 · auth
Derived credential
Argon2id(password, sha256(email)) signs you in — the password itself never leaves
// what you get
Private by construction.
Zero-knowledge encryption
Everything is encrypted on your device before it is synced. The server stores ciphertext it cannot read — there is nothing worth breaching.
One master password
Your master password never leaves this device — not even to sign in. Only a derived credential crosses the wire, and it cannot open the vault.
Built-in one-time codes
Store TOTP secrets next to their logins and copy fresh codes without a separate authenticator app.
Recovery and backups
A printable Emergency Kit recovers a forgotten master password, and encrypted backups are safe to keep anywhere.
// contact
Questions or feedback?
Found a bug, want a feature, or just curious how the crypto works? Write a line — replies go to the address you leave. No account needed.
One thing we can never help with: recovering a master password we do not have. That is the point.