YOUR DATA STAYS YOURS

All encryption and decryption happens in your browser. Your master password never leaves your device. We literally cannot see your data.

AES-256-GCM ENCRYPTION

Military-grade authenticated encryption. Your master password is strengthened through 100,000 PBKDF2 iterations before deriving the encryption key.

END-TO-END ENCRYPTED

Credentials are encrypted before they ever leave your browser. The server only stores ciphertext. No backdoors, no admin access, no exceptions.

IF WE GET HACKED

Attackers get meaningless encrypted blobs. Without your master password, your vault data is computationally impossible to decrypt.