Built and tested today. Beta means it’s still changing.
Pick a lens, then narrow by platform. Cards say where a feature runs and whether it’s ready or still in beta.
End-to-end encrypted vault
READYItems are encrypted on your device with XChaCha20-Poly1305 before they are stored or synced.
Master password hardening
READYYour master password is stretched with Argon2id (256 MiB, 3 passes at minimum). Weaker settings are refused.
Zero-knowledge
BETAThe server stores ciphertext. It can't read your items, folder names or keys, and it never receives your master password.
Tamper detection
BETAUploads are signed by the device and checked on download. A modified vault is refused, and so is one rolled back below what that device has seen. The Linux merge path gained the rollback check in release 0.7.4.
Auto-lock
READYThe vault locks after a period of inactivity and can be locked on demand. On Linux, an unlock from the command line lasts until you lock it again.
Logins and secure notes
READYIn a local vault on your computer, create, edit and search logins and notes. With an account, the command line adds and reads them.
Folders and favourites
BETAOrganise items into folders and mark favourites.
Password and passphrase generator
BETAGenerates random passwords or word-based passphrases with the options you choose.
Two-factor codes
READYStores authenticator seeds and shows the current six-digit code.
Passkeys
BETAStores passkeys and signs you in with them on iPhone.
SSH keys
READYStores SSH keys as vault items.
Vault health
BETAFlags reused and weak passwords. The check runs on your iPhone.
Import
READYImport logins, notes, cards, identities and passkeys from one other password manager's JSON export. Other export formats are not supported yet.
Encrypted export
READYWrite the whole vault to an encrypted file, or to an encrypted .kdbx database you can open in other tools.
Browser autofill
BETAFills a login on the domain it was saved for, subdomains included. It takes the last two parts of the address as the domain (three for some endings, such as .co.uk), so two sites on github.io count as one.
In-page suggestions
BETAA menu beside the username and password fields offers the matching logins.
Save new logins
BETAOffers to save a login after you sign in somewhere new.
Two-factor code fill
BETAFills the current two-factor code into the page's code field.
Browser extension sign-in
BETAThe browser extension signs in with your email and master password and syncs your vault, with no other software to install.
iPhone app
BETABrowse, search and use your vault on iPhone.
iPhone AutoFill
BETAFills passwords, one-time codes and passkeys in apps and Safari.
Face ID and Touch ID
BETAUnlock with Face ID or Touch ID. Changing the enrolled biometrics requires the master password again.
Add and edit on iPhone
BETACreate and edit logins on the phone. Changes sync to your other devices.
Sync across devices
BETAChanges made on one device appear on your others automatically.
Simultaneous edits are merged
BETAEdits made on two devices at the same time are merged item by item. A true conflict keeps both copies.
Device management
BETASee your signed-in devices and sign any of them out.
Email and master password
BETACreate an account and sign in on each device with your email and master password. No QR code.
Recovery kit
BETAA recovery key is shown once at sign-up. With it you can set a new master password if you forget yours. We can't open your vault for you without one.
Recovery waiting period
BETAA recovery waits 72 hours before it can complete. Until then, the iPhone app shows it in Settings and the command line shows it in account status, and either can cancel it.
Change master password
BETAChanging the master password signs out every other device.
MCP server
READYGives AI assistants tools to find, use and add credentials, with the secret kept out of each tool's reply.
Single-use handles
READYAn assistant gets a one-time handle, not the password. It expires after 60 seconds by default.
Materialise to file
READYA secret is written to a temporary file with owner-only permissions, and deleted when it expires. It isn't put into the conversation, a command line or our logs.
Redacted reads
READYListing and viewing items shows passwords and other secret fields as [PROTECTED] instead of the value. Names, usernames and site addresses are shown. In release 0.7.4, notes are hidden from assistants unless you mark that item's notes as readable yourself.
Leak contract
READYA test sweeps a marker secret through each command, tool, log and error, and fails the build if any one of them returns it. It checks each tool on its own, and since release 0.7.4 the file-writer route for chaining tools.
Fill browser fields for an assistant
READYTypes a secret straight into a field in a browser you opened for remote debugging, so the value stays out of the conversation. It doesn't yet check that the page is the site the login was saved for.
Two-factor codes for assistants
READYAn assistant can have a current two-factor code typed into a page without the code or the seed being returned to it.
Ask the owner for a secret
READYAn assistant can ask you for a credential through a one-time form. The value goes straight into the vault.
Audit trail
READYKeeps an append-only, value-free record of login activity.
Command line
READYCreate, list, unlock and sync a vault from the terminal. Secrets are read from files, never from arguments.
Desktop app for Linux
READYA tray app to unlock, search, add and edit items in a local vault on your computer. It does not open an account vault yet.
Agent vaults
BETAEach assistant works from its own separate vault with its own key, which can't open your personal vault.
Scoped agent credentials
BETAIssue an assistant a credential limited to named agent vaults, and revoke it at any time.
Coming soon
on the roadmapWindows app
SOONWhat ships first on Windows: a signed install that sets up the browser extension with one command and keeps it updated.
Web vault
SOONYour vault in a browser tab, with nothing to install. Until then, the browser extension signs in from any PC.
Android app
SOONAutofill and passkeys on Android. It goes to testers through Google Play’s internal testing track first.
Firefox and Safari
SOONThe extension runs in Chrome and Brave today. Ports to Firefox and Safari are not designed yet.
Family and team sharing
SOONShared vaults for a family or a team. Each member gets the vault key wrapped to them and signed by the person who confirmed them.
Expiring unlock keys
SOONThe command line’s unlock key will expire after 15 minutes by default, and the assistant server will turn down a personal vault unless you allow it.
Tell us what to build next.
Suggestions come from beta members, so we can follow up and you can try what ships. Join the beta to unlock the box.
Want in? Leave your email.
We’re letting people in a few at a time. We’ll email you when there’s room, and only about the beta.