Get started
Passwords + files, zero-knowledge

Your private desktop.Encrypted before it leaves your browser.

Keep your passwords and your important documents in one encrypted workspace with windows, folders and previews. We store only ciphertext. We can’t read your files, your passwords, or even their names.

  • AES-256-GCM
  • PBKDF2 × 600k
  • Hosted in the EU
  • No card required
FilesFileViewGounlocked
Documents ⌘K
Passport scan.pdf2.4 MB
Rental contract.pdf880 KB
Tax return 2025.pdf1.1 MB
Wedding photo.jpg4.8 MB
Recovery codes.txt1 KB
Car insurance3 items
Vault

Your files and logins, decrypted only in this browser tab.

How it works

The server holds a locked box. Only you have the key.

Every item is encrypted on your device with a key derived from your master password. That key is never sent anywhere.

01

Derive the key on your device

Your master password and a random salt go through PBKDF2-SHA256, 600,000 rounds. The result is a non-extractable AES-256 key held by your browser.

master password + salt → vault key
02

Encrypt everything, not just passwords

Titles, usernames, URLs, folder names, file names and file contents are each sealed with AES-GCM and a fresh random IV.

"Passport.pdf" → {iv, data}
03

Upload only ciphertext

The server stores the encrypted envelopes and serves them back. Without your master password they are just random bytes — to us, to a thief, to anyone.

server → 9fQe2Lw8…xR4=
Try it

Encrypt something. For real, right here.

In your browser

19 bytes of plaintext · key never leaves this tab

What our server receives
…

Same text, new output every time: each encryption uses a fresh random IV, so nobody can even tell two secrets are equal.

A saved login, exactly as our database holds it what a breach would leak
{
  "title":              {"iv":"4be1c09f72a3d5e8b06f11c2","data":"Zq8LrT0w9mYvX2p3..."},
  "website":            {"iv":"c7d20a5e9f1b384c6a2e7d90","data":"Q1v7NnKs0aB4eR8u..."},
  "username":           {"iv":"0e93f6b1a4c82d57e9b30f6a","data":"mPw3Jd8sLx7Zc1Hq..."},
  "encrypted_password": {"iv":"a1f58c3e0b7d29a64e1c8f05","data":"Hc9Yt2RkVb6Ws0Pn..."},
  "folder_id": 12,
  "updated_at": "2026-10-23T14:02:11Z"
}
The Desktop

Not another list of items. A whole desktop.

Password managers show you rows. Cloud drives can read your files. The Desktop gives you a familiar workspace — windows, folders, previews, a dock — where every byte is end-to-end encrypted.

Real windows

Open Files, Vault, Security and Trash side by side. Drag, resize, stack — like the computer you already know.

One folder tree

Passwords and files share the same folders. “Car” holds the insurance PDF and the insurer’s login.

Quick Look

Preview PDFs, images, video, audio and text in place. Decrypted in memory, never written to disk.

Search with ⌘K

Spotlight-style search across everything you own. It runs in your browser, so we never see the query.

Drag and drop

Drop files from your computer straight into a folder. They are encrypted before the upload begins.

A Trash that forgives

Deleted items wait in the Trash until you restore them or empty it for good.

Keyboard first⌘K Search everything↵ OpenF2 Rename⌘A Select all⌘⌫ Move to Trash
Sharing

Share a file without sharing it with us.

Send a contract to your accountant or a Wi-Fi password to a guest. Your browser encrypts a copy with a brand-new key and puts the key after the # in the link. Browsers never send that part to a server.

https://app/s/7fK2pQ9xLm#Xb8_Tq3vN0eLk2Wc9…

Sent to the server — which encrypted box to fetch.

Stays in the browser — the only key that opens it.

  • Expires in 1 hour to 7 days
  • Limited number of opens
  • Revoke any time
  • No account needed to open
Also inside

Everything a password manager should do.

Security audit

Find weak and reused passwords. The check runs locally on your decrypted vault.

Password generator

Uniformly random passwords from the browser’s cryptographic generator.

Import & export

Bring CSVs from Bitwarden, 1Password, LastPass, Proton Pass, your browser and more. Leave whenever you want.

Auto-lock

After five idle minutes the key is dropped from memory and the vault locks.

Installable

Add it to your dock or home screen. Same vault on every device.

Two passwords

One to log in, one to decrypt. The second never leaves your device.

Pricing

Passwords are free. Pay for space.

Every plan has the same encryption and the full Desktop. Paid plans add room for your files.

Free

1 GB
€0forever

No card required

Your whole password vault, plus room for the documents that matter.

Create your vault
  • Unlimited passwords
  • 1 GB of encrypted file storage
  • The full encrypted Desktop
  • Encrypted share links
  • Weak and reused password audit
  • Import from Bitwarden, 1Password, LastPass and more

Plus

100 GB
€4.17/ month

€50 billed yearly

Room for a household’s documents, plus the photos you can’t lose.

Start with Plus
  • Everything in Personal
  • 100 GB of encrypted file storage
  • Early access to new features
FAQ

Questions people ask first.

Straight answers, including the uncomfortable ones. Read all questions.

What does “zero-knowledge” actually mean here?

Your master password never leaves your device. Your browser turns it into an encryption key and uses that key to encrypt everything before upload: passwords, usernames, website addresses, titles, folder names, file names and file contents. Our servers only ever store the encrypted result.

What is the Desktop?

A full workspace in your browser that feels like a computer: draggable windows, a Files app, your Vault, a Trash, Quick Look previews and a dock. Passwords and files live in the same folders, so the folder “Car” can hold the insurance PDF and the insurer’s login.

What happens if I forget my master password?

Use the recovery code from the recovery kit you saved when you set up your vault: it lets you choose a new master password. Without that code your data cannot be recovered — not by you, not by us. That is the price of an encryption key that only you hold.

How do share links work?

Your browser creates a new random key, encrypts a copy of the file or login with it, and uploads only the encrypted copy. The key is placed after the # in the link. Browsers never send that part of a URL to the server, so we store a box we cannot open.

Is the free plan really free?

Yes, with no time limit. Passwords are unlimited on every plan; paid plans add file storage and priority support.

Put your important things somewhere only you can open.

Free forever for your passwords. Set up in under a minute.

Create your free vault