Can I store API keys and developer secrets?

Yes. VaultZero is well suited to API keys, tokens, and environment secrets. They are encrypted on your device before storage, so they never sit in plaintext on any server.

How is this different from my browser's password manager?

VaultZero uses a separate vault password and a zero-knowledge design, stores more than logins, and lets you securely share a single item with someone you trust.

Can I share something with my family or team safely?

Yes. You can share a single item through a secure link whose decryption key lives only in the link, paired with a separate access code. Recipients see only what you shared and need no account.

Zero-knowledge · end-to-end encrypted

Only you
hold the key.

A private vault for your passwords, API keys, and final wishes. Encrypted on your device, before anything leaves it — so no one else can read it. Not a hacker. Not us.

Create your vault See how it works

No card required. Your vault password never touches our servers.

How it works

Three steps. One key only you have.

VaultZero is built so that the secret protecting your data never leaves your device. Here's the whole idea.

Set your vault password

You choose a vault password that's separate from your login. It's used to lock and unlock your data — and it's never sent to us.

Everything encrypts on your device

Each password, note, and document is sealed with strong encryption right in your browser, before it's ever stored.

iii

Only you can open it

We store only scrambled data. Without your key, it's unreadable — even to us. That's what zero-knowledge means.

The promise

If we got hacked tomorrow, your data would still be safe.

Zero-knowledge by design
Your vault password is never transmitted or stored. We literally cannot read your data.
Encrypted before it leaves you
Strong AES-256 encryption happens on your device — not on a server you have to trust.
A recovery key only you hold
Forget your password? Restore access with your one-time recovery key — held by you, never by us.

What our servers actually see

Your TD Bank login

9f2a·c41e·77bd·a0e3·1f88·b2c9·4d6f·

e1a7·3c20·8fd4·6b95·02ce·aa10·d3f7

Your will & documents

a30f·91bc·5e72·0d48·c6a1·ff39·7b04·

2e8d·14ab·9c63·f0d7·5a29·b8e1·44cf

Indecipherable without your key. This is everything a breach would expose.

Who it's for

For everything you'd hate to lose or leak.

One private place for your everyday logins, the API keys you can't afford to expose, and the documents your family may need one day.

Everyday passwords

Logins, cards, and secure notes — organized, searchable, and sealed behind one key.

API keys & dev secrets

Tokens, keys, and environment secrets — encrypted on your device, never sitting in plaintext in a repo or a notes app.

Your digital estate

Wills, identity records, and final wishes — kept private until they're truly needed.

256

bit AES encryption

passwords we can read

key — held only by you

∞

things worth protecting

Questions

The things people ask first.

It means the encryption key that unlocks your data is created and used only on your device, and never sent to us. We store your information in scrambled form, so we have no way to read it. Your privacy isn't a policy we promise — it's a property of how the system is built.

At setup, you receive a one-time recovery key. With it, you can restore access and set a new vault password — without us ever holding that key. Keep it somewhere safe. If you lose both your vault password and your recovery key, your data can't be recovered by anyone, including us. That's the trade-off that makes it truly private.

Yes — it's a natural fit. API keys, access tokens, and environment secrets are exactly the kind of thing that shouldn't sit in plaintext in a repo, a notes app, or a shared doc. In VaultZero they're encrypted on your device before storage, so they never exist in readable form on any server.

VaultZero is built for the things you'd never want a company to be able to read — not just logins, but API keys, wills, identity documents, and final wishes. It uses a separate vault password and a zero-knowledge design, and it lets you securely hand a single item to someone you trust. It's a vault, not just autofill.

Yes. You can share a single item through a secure link whose decryption key lives only in the link itself — never on our servers — paired with a separate access code you give them another way. They see only what you shared, never the rest of your vault, and they don't need an account to open it.

Your encrypted data is stored durably, and your recovery key lets you regain access if you lose your password. Because everything is encrypted before it reaches us, even our own backups contain only scrambled data — readable by no one but you.

Only youhold the key.