Create your vault

Your secrets are encrypted on THIS device with a memory-hard key (Argon2id → AES-256-GCM). There is no account and no server copy — nothing to breach, nothing to subpoena. Choose a strong passphrase you won't forget; you'll also get a recovery phrase and can split a recovery key among people you trust.

Passphrase Confirm passphrase

Already have a vault on another device? Restore from recovery phrase or guardian shares.

Unlock

Enter your passphrase. Deriving the key is deliberately slow (memory-hard) — a moment here is centuries for anyone brute-forcing a stolen copy.

Passphrase

Forgot it? Restore from recovery phrase or guardian shares (this device keeps your encrypted data).