A zero-knowledge password manager that runs entirely in your browser. Your master key never leaves your device.
Zero-Knowledge ArchitectureEnter your master key to access your saved passwords. This key is used to derive the encryption key and is never stored.
Minimum 8 characters. Your key derives a strong encryption key using scrypt KDF.
This password vault is designed with privacy and security as the highest priority. Your data never leaves your browser unencrypted.
Military-grade authenticated encryption protects your passwords with 256-bit keys.
Memory-hard KDF makes brute-force attacks computationally infeasible.
All encryption and decryption happens in your browser. Nothing is sent to any server.
We never see, store, or have access to your master key or passwords.
// 1. Derive encryption key from master key using scrypt
const salt = crypto.getRandomValues(new Uint8Array(32));
const derivedKey = await scrypt(masterKey, salt, 2^14, 8, 1, 32);
// 2. Encrypt each password with AES-256-GCM
const iv = crypto.getRandomValues(new Uint8Array(12));
const encrypted = await crypto.subtle.encrypt(
{ name: 'AES-GCM', iv }, derivedKey, passwordData
);
// 3. Store only encrypted data in localStorage
This vault uses secure scrypt parameters for key derivation: