Sign in

End-to-end encrypted key/value vault for project secrets. Your data is encrypted in your browser before it ever leaves. Zero-knowledge server — even we can't read your secrets.

Requires a Google account for identity only. We never see your Google password, only a signed JWT that proves who you are.

Create your vault

Welcome, . Choose a master password — this is what unlocks your vault every time. Also write down the recovery phrase in case you forget the password.

Recovery phrase (24 words) — write this down Master password Confirm master password

Unlock

Welcome back, . Enter your master password to decrypt the vault.

Master password

Unlock Use recovery phrase

Recover with phrase

Enter your 24-word recovery phrase. This will unlock the vault and let you set a new master password.

Recovery phrase (24 words, separated by spaces) New master password Confirm new master password

Add 2FA code

Paste the base32 secret from a QR code (usually shown as "can't scan? enter this code manually"). This vault will then generate the same 6-digit codes as Google Authenticator.

Label (KEY_NAME) Issuer (optional — shown as hint) Base32 secret