Products · Secrets management
Credential vault — one you can actually self-host.
This is a zero-knowledge password and secrets manager for small technical teams and the agencies who run their infrastructure. Everything is encrypted and decrypted on your own device — the server never sees your passphrase or your data. Run it on our hosted infrastructure, or host the open-source build entirely on your own.
Credential vault
Secrets management · Early access
What it does
Stores the credentials a technical team actually shares: server logins, API keys, database passwords, customer access. Folders are shared with named people, and each member is sealed into the folder cryptographically rather than granted a row in a permissions table.
Why it is built this way
Most team password managers are only as trustworthy as the company running them, because the server can decrypt what it stores. It derives your keys in your own browser and never transmits the passphrase, so a compromised server yields ciphertext. Revocation is real: remove someone and the affected keys are rotated, not flagged.
Self-hosting
The build is open-source and designed to be run by the people who own the data — a single deployment on your own infrastructure, in your own jurisdiction. If you would rather not operate it, we host it for you under the same zero-knowledge model.
- Zero-knowledge
- Hosted or self-hosted
- Open-source
Where it lives