Derive the key on your device
Your master password and a random salt go through PBKDF2-SHA256, 600,000 rounds. The result is a non-extractable AES-256 key held by your browser.
master password + salt → vault keyKeep your passwords and your important documents in one encrypted workspace with windows, folders and previews. We store only ciphertext. We can’t read your files, your passwords, or even their names.
Your files and logins, decrypted only in this browser tab.
Every item is encrypted on your device with a key derived from your master password. That key is never sent anywhere.
Your master password and a random salt go through PBKDF2-SHA256, 600,000 rounds. The result is a non-extractable AES-256 key held by your browser.
master password + salt → vault keyTitles, usernames, URLs, folder names, file names and file contents are each sealed with AES-GCM and a fresh random IV.
"Passport.pdf" → {iv, data}The server stores the encrypted envelopes and serves them back. Without your master password they are just random bytes — to us, to a thief, to anyone.
server → 9fQe2Lw8…xR4=…
Same text, new output every time: each encryption uses a fresh random IV, so nobody can even tell two secrets are equal.
{
"title": {"iv":"4be1c09f72a3d5e8b06f11c2","data":"Zq8LrT0w9mYvX2p3..."},
"website": {"iv":"c7d20a5e9f1b384c6a2e7d90","data":"Q1v7NnKs0aB4eR8u..."},
"username": {"iv":"0e93f6b1a4c82d57e9b30f6a","data":"mPw3Jd8sLx7Zc1Hq..."},
"encrypted_password": {"iv":"a1f58c3e0b7d29a64e1c8f05","data":"Hc9Yt2RkVb6Ws0Pn..."},
"folder_id": 12,
"updated_at": "2026-10-23T14:02:11Z"
}Password managers show you rows. Cloud drives can read your files. The Desktop gives you a familiar workspace — windows, folders, previews, a dock — where every byte is end-to-end encrypted.
Open Files, Vault, Security and Trash side by side. Drag, resize, stack — like the computer you already know.
Passwords and files share the same folders. “Car” holds the insurance PDF and the insurer’s login.
Preview PDFs, images, video, audio and text in place. Decrypted in memory, never written to disk.
Spotlight-style search across everything you own. It runs in your browser, so we never see the query.
Drop files from your computer straight into a folder. They are encrypted before the upload begins.
Deleted items wait in the Trash until you restore them or empty it for good.
Send a contract to your accountant or a Wi-Fi password to a guest. Your browser encrypts a copy with a brand-new key and puts the key after the # in the link. Browsers never send that part to a server.
Find weak and reused passwords. The check runs locally on your decrypted vault.
Uniformly random passwords from the browser’s cryptographic generator.
Bring CSVs from Bitwarden, 1Password, LastPass, Proton Pass, your browser and more. Leave whenever you want.
After five idle minutes the key is dropped from memory and the vault locks.
Add it to your dock or home screen. Same vault on every device.
One to log in, one to decrypt. The second never leaves your device.
Every plan has the same encryption and the full Desktop. Paid plans add room for your files.
No card required
Your whole password vault, plus room for the documents that matter.
Create your vault€20 billed yearly
For scans, contracts, tax records and the rest of your paper life.
Start with Personal€50 billed yearly
Room for a household’s documents, plus the photos you can’t lose.
Start with PlusFree forever for your passwords. Set up in under a minute.
Create your free vault