The only password manager that never sees your secrets — even during sync. OPAQUE protocol. End-to-end encrypted. Built for individuals, families, and enterprises.
The server never receives your password — not even a hash. OPAQUE performs authentication without exposing your credentials to the relay.
Vault data is encrypted locally with AES-256-GCM before it ever touches the network. The relay stores your vault contents as ciphertext and never receives your keys.
Store, manage, and securely transfer WebAuthn passkeys. Cross-device handoff via the CXP (Credential Exchange Protocol) — import/export in CXF format.
Continuously checks your credentials against Have I Been Pwned's database of 14 billion+ compromised records. Alerts you before attackers act.
On-device ML model analyses URLs for phishing patterns, typosquatting, and suspicious redirects — without sending your browsing history to any server.
SSO via OIDC, company vaults with per-collection roles, and an activity log of administrative and item events. Directory provisioning and SIEM streaming are on the roadmap. Employee-facing company vault access is in development.
Security guarantees
No credit card required for the free tier or 14-day trial.
Personal
10 vault items, local only. Always free.
Personal+
Most popularUnlimited items, cross-device sync, breach alerts.
Family
Everything in Personal+, up to 5 members.