Your secrets, sealed on your device.
A zero-knowledge password manager with autofill that just works. Self-hosted, local-first, post-quantum ready.
Zero-knowledge
Everything is encrypted on your device. Our servers store ciphertext they can never read.
Two-Secret Key Derivation
Your master password plus a device-held Secret Key. Stolen server data alone is useless.
Passkey-native
Save, sync, and sign in with passkeys everywhere — and take them with you (CXF/CXP portability).
Self-hosted
Runs on a server you control. No vendor account, no subscription, no third-party analytics.