A password vault the server can never read.
Every secret is encrypted on your device before it ever leaves it. We store ciphertext we cannot decrypt — your master password never touches our servers.
u2secured derives your keys locally with Argon2id and encrypts each vault item with AES-256-GCM. The server only ever sees opaque ciphertext, so a breach of our infrastructure reveals nothing about your secrets.
Organise secrets into folders, keep a full version history of every change, and hand a single secret to someone with a link that expires — and that we can never read, because its key travels in the link itself.
Take your vault anywhere
The Password Vault app puts every secret on your phone, unlocked with Face ID or your fingerprint and readable even with no signal. Same zero-knowledge encryption as the web vault.
About the appWhat you get
Client-side encryption
AES-256-GCM per item, keys derived on-device. We never see plaintext.
Strong key derivation
Argon2id stretches your master password into keys that never leave the device.
Breach monitoring
Saved passwords are checked against known breach corpora. Only a five-character hash prefix ever leaves your device.
Multiple workspaces
Keep personal and team vaults separate, and move between them without signing out.
Version history
Every change is versioned, so you can recover an earlier value at any time.
Public share links
Send a single secret with an expiring, optionally burn-after-read link.
Autofill everywhere
A Chrome extension that fills your logins as you browse and captures new ones.
Security model
- Master password and keys never leave your device
- Row-level tenant isolation in PostgreSQL
- Encrypted item versions and audit logging
Questions before you start?
Our support team is happy to help you evaluate Password Vault.