Credentials that cannot leak from us
Shared and personal vaults, encrypted client-side. Import from KeePass, 1Password, Bitwarden or LastPass without retyping anything.
For companies
Security your team will actually use
Roll out one Swiss account across the company. Every vault is encrypted on the employee's device, so a breach of our infrastructure hands an attacker ciphertext and a revision number — nothing you would have to disclose.
The three gaps every company has
Credentials get reused, traffic crosses networks you do not control, and your staff's personal data is already indexed by brokers. One account closes all three.
Connections you can vouch for
WireGuard tunnels terminating on Swiss infrastructure, for staff on hotel Wi-Fi, coworking networks and home links.
Exposure your people did not choose
Executives and support staff are the phishing surface. We map what brokers publish about them and file the removals.
What zero-knowledge means for your risk register
Not a slogan — four properties you can write down, test, and hand to an auditor.
A breach of our servers yields ciphertext
Encryption and decryption happen in the client. Keys are derived on the device and never transmitted, so our database holds AES-256-GCM blobs and a revision counter.
Two secrets, not one
A master password the employee remembers, combined through HKDF-SHA256 with a 240-bit Secret Key held on their devices. Argon2id at 64 MiB stands between a stolen blob and a guess.
Rollback is detected, not just unlikely
Vault metadata and a monotonic revision counter are authenticated alongside the ciphertext, so an old vault cannot be replayed at a user as if it were current.
Swiss jurisdiction, plainly
Built and hosted in Switzerland under Swiss data protection law, rather than a regime that can compel silent disclosure.
Rolling it out
A working deployment in an afternoon, not a quarter.
Import what you already have
Bring the existing password manager across with folders intact, or start clean. Nothing has to be retyped.
Invite the team
Each person sets a master password and receives a Secret Key. Neither you nor we can recover a vault without them — that is the point, and it is worth saying out loud during onboarding.
Put it where the work happens
Chrome and Firefox extensions for autofill, desktop apps for macOS, Windows and Linux, mobile apps with biometric unlock.
Watch what surfaces
Breach monitoring tells you which credentials have appeared publicly and which to rotate first, instead of handing you an undifferentiated list.
