Passwords, API keys and files, encrypted on your own device before they leave it. We store scrambled data we can't read. Open it anywhere with your passphrase.
With Google or email. That only proves who you are; it never unlocks anything.
Your device turns it into the key that locks your vault. It never leaves your device.
Everything is encrypted before it uploads, and decrypted only on your devices.
Keys, passwords and recovery codes as simple label-value pairs. Search instantly; it all happens on your device.
Turn a file into a .pcipher file only your passphrase opens. Free, unlimited, nothing uploaded.
Log in once, then jump between your accounts on any site. Coming with the extension.
Approve a new device from one you already use. No passphrase typing needed.
Pro: have a secret delete itself at a set time, or remind you to rotate it.
Send a secret through a link that only opens once, or share a whole vault.
Your passphrase becomes a key on your device (Argon2id). That key unlocks a random master key, which unlocks your vaults, and each item has its own key. Our servers only ever hold the locked versions.
On your device
Encryption and decryption run in your browser, in compiled, memory-safe code.
Modern ciphers
XChaCha20-Poly1305 for data, Argon2id for your passphrase, X25519 for sharing.
Open format
The .pcipher format and the encryption core are public, so anyone can check them.
Everything you need to stop keeping passwords in a text file.
$0forever
More room, more keys, your files in the vault, and secrets that clean up after themselves.
$7.50per month
$89.99 every 12 months
No. Everything is encrypted on your device before it is sent, with a key made from your passphrase. Our servers only ever store scrambled data and never receive your passphrase or your keys.
Use the Recovery Key you saved when you set up your vault. If you turned on assisted recovery, you can also recover through your recovery email after a 72-hour safety wait. If you have neither, nobody can open your vault, not even us. That is what keeps it private.
No, and it must not be. Your account password (or Google) signs you in. Your vault passphrase unlocks your data on your device and is never sent to us.
No. The file encryption tool works right in your browser without an account, with no limits. Nothing is uploaded. You get a .pcipher file that only your passphrase opens.
More secrets, several vaults each with its own key, encrypted file uploads, scheduled auto-delete, secret links and more Quick accounts. It costs $9.99 a month, less if you pay for 6 or 12 months.
It takes a minute. Your first 100 secrets are free, forever.