End-to-end encrypted
One master passphrase encrypts every secret. The sync server only ever stores ciphertext — not your passwords, keys, or passphrase. Not even we can read your data.
vault: sealed · XChaCha20-Poly1305 · key derivation: Argon2id
Connect to your servers in a keystroke. Everything you save is encrypted on your device and syncs across your machines — the server never sees your passwords, keys, or master passphrase.
One master passphrase encrypts every secret. The sync server only ever stores ciphertext — not your passwords, keys, or passphrase. Not even we can read your data.
Add a host on your laptop, it's on your desktop a moment later. Hosts, credentials, groups and trusted keys stay in sync — even with two machines at once.
Built on a Rust core: opens instantly, stays out of your way, and works fully offline. Sync is a bonus, never a dependency.
A ⌘K command palette and a minimal, monochrome UI. Reach everything from the keyboard — connect, search, open, split — without touching the mouse.
Continue with Google, GitHub, or email. This only proves who you are — it has nothing to do with your encryption.
The single key that encrypts everything. It never leaves your device and never reaches the server.
Add hosts, open SSH/SFTP sessions, split panes. Changes encrypt and sync to your other devices in seconds.
Keys are derived from your passphrase with Argon2id and every record is sealed with XChaCha20-Poly1305. The server stores only meaningless ciphertext. Lose your passphrase and no one — not even us — can recover your data. That's not a limitation; it's the design.