The password manager that never sees your passwords.
Your vault is encrypted on your device with AES-256-GCM, then synced to every device you own. What we store is ciphertext and a vault key wrapped under your master password — which we never receive, and cannot open.
Unlimited passwords, passkeys and 2FA codes on the free tier. No account needed to use it offline.
AES-GCM keys, authenticated on every read
PBKDF2 iterations on the browser and mobile tier
servers of ours that hold your vault
Everything you expect. Nothing you didn't ask for.
Feature parity with the paid mainstream managers, without the analytics SDK, the advertising identifier, or the item cap.
Everything, not just logins
Logins, secure notes, payment cards, identity documents and personal info — with a password generator that produces the kind of password nobody types twice.
Passkeys and TOTP, unpaywalled
When you create a passkey on a site, Vault offers to record it so you can see where you have one — synced across your devices, on the free tier. The key itself stays in your device's secure hardware, which is the whole point of a passkey. 2FA codes for as many accounts as you like, too: charging for someone's second factor is not a business model we want.
Face ID, Touch ID, WebAuthn PRF
Biometric unlock is an alternative wrapping of the same vault key, not a weaker one and not a bypass. The master password stays the root.
Sync everywhere, offline-first
Add an entry on your phone and it appears on your laptop. Edits made with no network queue locally and push when it returns; two devices editing apart merge rather than overwrite. Store the encrypted vault in your own Google Drive, or in your Vault account.
Password health that names names
Weak and reused detection runs entirely on your device and shows you every affected item by name, free, always. Continuous breach-corpus monitoring is what Premium adds.
End-to-end encrypted sharing
ECDH over P-256, HKDF-SHA256, AES-256-GCM, encrypted on the sender's device. Receiving a share is always free — a paying user's share should never fail because of the recipient's tier.
Collections and attachments
Group items into collections and attach files. Attachments live inline in the encrypted blob, so the size limits protect your sync speed rather than our storage bill.
Dashlane CSV in, CSV out
Import the whole Dashlane export in one pass — logins, secure notes, payments, IDs and personal info, all five files at once. Export is free on every tier, forever, because a password manager holding your own passwords hostage is the one thing that ends a product.
Auto-lock and offline-first
Your vault stays unlocked for five minutes of use and locks itself after that — on every surface, browser extension included. It opens with no network at all, because sync is a convenience layer on top of a vault that already lives on your disk.
The same vault on every device you own
- macOS · iOS · iPadOS
- Windows
- Linux
- Android
- Chrome · Edge · Brave · Opera · Arc
- CLI · TUI
One vault key, wrapped per platform — which is why the same vault opens everywhere even though the key derivation differs between tiers.
The actual cryptography
Named primitives and real parameters, including the one place where the numbers are worse than we would like them to be.
Vault contents
AES-256-GCM
Authenticated encryption, fresh 96-bit IV per operation. A tampered blob fails the tag check instead of decrypting to garbage.
Key derivation — desktop and CLI
scrypt, N=2¹⁷
Memory-hard (r=8, p=1, ~128 MB working set), which is what makes GPU and ASIC guessing expensive.
Key derivation — browser and mobile
PBKDF2-HMAC-SHA256, 600,000 iterations
The Web Crypto API exposes no memory-hard KDF at all, so this tier uses the strongest standards-based option rather than shipping unaudited crypto in JavaScript. It meets the OWASP 2024 floor, but it is not memory-hard — and against an offline attacker a vault is only as strong as its weakest wrapping. A long, high-entropy master password is what closes that gap.
Sharing
ECDH P-256 + HKDF-SHA256 + AES-256-GCM
A fresh ephemeral key pair per share. The recipient's private key never leaves their vault.
Sync
Your own Google Drive, or your Vault account — ciphertext either way
Ciphertext moves device → Google, never through us. A Supabase Realtime channel carries a “something changed” ping — a revision indicator on a user-scoped topic, and nothing else.
What we do not claim
No independent third-party security audit has been performed. Everything above is a description of what the code does, not an attested finding. Vault claims no SOC 2, ISO 27001, HIPAA or GDPR certification, and implements no custom cryptography — only standard, published primitives. If you lose your master password and your recovery material, nobody — including us — can recover your vault. That is the design working as intended, and it is a real cost you should weigh before trusting it with anything.
Simple pricing
14 days of Premium on install, no card. Free needs no card ever, and your vault stays readable and exportable on every tier, forever.
Free
A complete password manager, not a demo.
- Unlimited logins, notes, cards and IDs
- Unlimited passkeys and TOTP codes
- 1 synced device, unlimited local-only installs
- Autofill, password capture, generator, biometric unlock
- Weak and reused password health, by name
- CSV import and export, always free
Premium
Most popularFor a vault that has become load-bearing.
or $24/year — two months free · ₹129/mo in India
- Everything in Free
- Unlimited synced devices
- Continuous breach monitoring with alerts
- Unlimited collections, 250 MB attachments
- Unlimited managed encrypted sharing
- Email support
Family
6 people, 6 separate vaults.
or $48/year — $0.67 per person per month
- Everything in Premium, for 6 people
- A shared family collection
- Family-wide password health roll-up
- Each member keeps their own private vault
Prices in USD, charged by our merchant of record, who is the seller of record and issues your invoice. Local pricing and UPI available in India. 14-day refunds, no questions asked.
Frequently asked
If you cannot see my vault, what happens when I forget my master password?+
You lose the vault. There is no reset, no escrow, no support path, and no legal process that changes it — the key is derived from your master password on your device and we hold no copy. Write the master password down and keep it somewhere physically safe, and keep an export. We would rather say this plainly on the pricing page than in a support ticket.
Where is my data actually stored?+
On your device, and — if you enable sync — as ciphertext, either in your own Google Drive in the app-private appDataFolder area or in our Supabase database if you sign in to a Vault account. Both hold only ciphertext, alongside your vault key wrapped under your master password; we never receive that password, so neither we nor Google can open them. When you save an entry it broadcasts a “revision changed” ping on a channel scoped to your account so your other devices know to re-fetch from Drive. That ping carries a revision number and a random device id — no vault content, entry name, or key material. Like any network service it necessarily sees connection metadata: your IP address, timestamps, and therefore roughly when you are active. If you use encrypted sharing, that instance also stores your account email, your public key, and the encrypted share blob — never the entry name, which stays inside the ciphertext.
Why is the key derivation different on mobile?+
Because the Web Crypto API exposes no memory-hard key-derivation function. The desktop app and CLI use scrypt at N=2¹⁷; the browser extension, web app and mobile apps use PBKDF2-HMAC-SHA256 at 600,000 iterations, which meets the OWASP 2024 floor but parallelises on GPUs in a way scrypt does not. We would rather state the asymmetry than ship hand-rolled crypto to hide it.
Has Vault been audited?+
No. No independent third-party security audit has been performed. The design and primitives are documented so you can judge them, and the source is public, but nobody external has attested to the implementation.
What does the free tier actually cost me?+
Nothing, and it is not crippled: unlimited items, unlimited passkeys, unlimited TOTP, full password health, and export. The limit is 1 synced device — unlimited installs may run local-only. Sync is the thing people buy in this category, so that is the thing we gate.
What happens to my vault if I stop paying?+
It stays readable, writable and exportable. A password manager must never hold your passwords hostage; a lapsed subscription reduces limits, it never locks a vault. Nothing you already stored is taken away.
Which platforms?+
iPhone, iPad, macOS, Windows, Linux, Android, the Chrome extension, the web app, and the command line. The same vault opens on all of them.
Can I move in from Dashlane, and back out?+
Yes both ways. Dashlane CSV import is built in, and CSV export is free on every tier, forever. Being easy to leave is the only credible way to ask you to trust us with this.
Install in one line, or grab an app
The command line is the fastest way in. Desktop and mobile apps are rolling out per platform — anything not ready yet is marked, not linked to a dead page.
npm install -g @deepakmarathe/vault-clicurl -fsSL https://vault.dfacto.ai/install | bashbrew install dfacto/tap/vaultApps
Take your passwords back
Free forever, no account required to start. 14 days of Premium on install, no card.