The password vault the server can never read.
U2 Secured Password Vault is a password manager that encrypts every password on your device before it ever leaves it. We store ciphertext we cannot decrypt — your master password never touches our servers.
U2 Secured derives your keys locally with Argon2id and encrypts each vault item with AES-256-GCM. The server only ever sees opaque ciphertext, so a breach of our infrastructure reveals nothing about your secrets.
Save every password, login and note in one place, generate a strong, unique password for each site, and let the Chrome extension fill them in for you. Open the same vault on the web, in Chrome, and on iPhone and Android.
Organise secrets into folders, keep a full version history of every change, and hand a single secret to someone with a link that expires — and that we can never read, because its key travels in the link itself.
Take your vault anywhere
The Password Vault app puts every secret on your phone, unlocked with Face ID or your fingerprint and readable even with no signal. Same zero-knowledge encryption as the web vault.
About the appWhat you get
Client-side encryption
AES-256-GCM per item, keys derived on-device. We never see plaintext.
Strong key derivation
Argon2id stretches your master password into keys that never leave the device.
Breach monitoring
Saved passwords are checked against known breach corpora. Only a five-character hash prefix ever leaves your device.
Multiple workspaces
Keep personal and team vaults separate, and move between them without signing out.
Version history
Every change is versioned, so you can recover an earlier value at any time.
Public share links
Send a single secret with an expiring, optionally burn-after-read link.
Autofill everywhere
A Chrome extension that fills your logins as you browse and captures new ones.
Security model
- Master password and keys never leave your device
- Row-level tenant isolation in PostgreSQL
- Encrypted item versions and audit logging
Password vault questions
- What is a password vault?
- A password vault is an encrypted store for your passwords, logins and other secrets, unlocked with a single master password. U2 Secured Password Vault encrypts every item on your device, so the copy on our servers is ciphertext we cannot read.
- Is a password vault the same as a password manager?
- Yes — the two names describe the same thing. A password manager is a password vault plus the tools around it: U2 Secured generates strong passwords, fills them in through the Chrome extension, and — on Basic and Premium — warns you when a saved password appears in a known breach.
- Is U2 Secured Password Vault free?
- Yes. The free plan holds up to 500 items for one person, with the same encryption as every paid plan. Basic and Premium add team members, groups, breach monitoring and a longer audit log.
- Can U2 Secured see my passwords?
- No. Your keys are derived from your master password on your device with Argon2id, and each item is sealed with AES-256-GCM before it is uploaded. Your master password is never sent to us — only a hash derived from it, which cannot decrypt anything.
- Where can I use my password vault?
- In any modern browser at vault.u2secured.com, through the Chrome extension, and in the U2 Secured Password Vault app for iPhone and Android, which unlocks with Face ID or your fingerprint and works offline.
Questions before you start?
Our support team is happy to help you evaluate Password Vault.