A privacy-first password manager. Passwords, 2FA codes, notes, cards, identities, and email aliases — all encrypted on your device, so nobody but you can read them.
Every item type, every operation, every share — computed over data that's already encrypted on your device.
Everything is encrypted on your device with a key derived from your master password. We only ever store ciphertext.
Logins, passkeys-ready fields, secure notes, credit cards, identities, and fully custom items with typed fields.
Store TOTP secrets alongside logins and get live, auto-refreshing one-time codes — no separate authenticator app.
Generate unique hide-my-email aliases to cut spam and keep your real address private.
Share a single item via an encrypted link, or share an entire vault with another user. Revoke anytime.
Check any password against billions of breached credentials using k-anonymity — the password never leaves your device.
Three steps, and at no point does the server hold anything it can decrypt.
Your master password runs through Argon2id in the browser to derive your encryption key. It never leaves your device — not even hashed.
Each login, note, card, and TOTP secret is sealed with AES-256-GCM before upload. Item names included — the server sees only blobs.
Sign in on any device and your vault decrypts locally. Autofill, codes, and sharing all work without the server ever reading a thing.
Vault Desk Pass checks your passwords against billions of breached credentials using k-anonymity: only the first 5 characters of a hash are ever sent. The password itself never leaves your device — not to us, not to anyone.
One master password unlocks everything — and it never leaves your browser. Create your encrypted vault in under a minute.