End-to-end encrypted
One master passphrase encrypts every secret before it leaves your device. The sync server stores ciphertext and nothing else: no passwords, no keys, no passphrase.
vault: sealed · XChaCha20-Poly1305 · key derivation: Argon2id
Connect to your servers in a keystroke. Everything you save is encrypted on your device and syncs across your machines — the server never sees your passwords, keys, or master passphrase.
One master passphrase encrypts every secret before it leaves your device. The sync server stores ciphertext and nothing else: no passwords, no keys, no passphrase.
Add a host on your laptop and it's on your desktop a moment later. Hosts, credentials, groups and trusted keys converge cleanly, even when you edit on two machines at once.
Built on a Rust core: opens instantly, stays out of your way, and works fully offline. Sync is a bonus, never a dependency.
A ⌘K command palette and a minimal, monochrome UI. Reach everything from the keyboard — connect, search, open, split — without touching the mouse.
Continue with Google, GitHub, or email. This only proves who you are — it has nothing to do with your encryption.
The single key that encrypts everything. It never leaves your device and never reaches the server.
Add hosts, open SSH/SFTP sessions, split panes. Changes encrypt and sync to your other devices in seconds.
Your passphrase is stretched with Argon2id into keys that seal every record with XChaCha20-Poly1305 before it leaves your machine. The server stores ciphertext it has no way to open. Lose the passphrase and the data is gone, for everyone, permanently — that trade is the whole point.