Built for security-first users

Everything you need, nothing you don't.

A complete password management system — built around the principle that your data belongs to you alone.

Core architecture

Zero-knowledge vault

Your master password never leaves your device. We derive an encryption key locally using PBKDF2-SHA256 with 600,000 iterations, then wrap a randomly-generated AES-256-GCM vault key.

Every vault item is encrypted before it's sent to our servers. All we ever store is opaque ciphertext — mathematically impossible for us (or anyone who compromises our servers) to read.

  • AES-256-GCM item encryption
  • PBKDF2-SHA256 (600k iterations)
  • RSA-OAEP-4096 key wrapping
  • HKDF key derivation
  • Per-item random IVs
VaultKeepUnlocked

Search vault…

G

github.com

me@email.com

Fill
S

stripe.com

admin@company.com

Fill
V

vercel.com

me@email.com

Fill
Browser extension

Autofill that actually works

The VaultKeep extension detects login forms on every page and suggests matching credentials. One click fills the username and password — no typing, no copying.

Chrome & Chromium
One-click autofill
Password generator
Auto-save on signup
Download extension
Security monitoring

Know your security posture

VaultKeep scores every item in your vault and aggregates them into a live security rating. Weak passwords, reused credentials, and compromised accounts all drag your score down — and we tell you exactly how to fix each one.

  • Real-time security score (0–100)
  • HIBP breach detection on all emails
  • Weak & reused password detection
  • AI-powered remediation tips
87/ 100

Your live vault security score

Sharing

Share securely, not recklessly

Item sharing uses your recipient's public key to encrypt the item key — meaning only they can decrypt it. Not us, not anyone intercepting the request.

Zero-knowledge sharing

Items are re-encrypted with the recipient's RSA public key before sharing. Even we cannot see what you share.

Organisation vaults

Create shared vaults for your team with Owner, Manager, and Viewer roles. Control access granularly.

Emergency access

Grant trusted contacts emergency access to your vault. A configurable waiting period prevents abuse.

Business

Built for teams, too

The Business plan adds enterprise-grade controls without enterprise complexity.

Admin console

Manage users, seats, and policies from a unified dashboard.

Security policies

Enforce minimum password strength, MFA requirements, and vault lock timeouts org-wide.

SSO / SAML

Federated login with your existing identity provider — Okta, Entra, Google Workspace.

SCIM provisioning

Automatically sync users and groups from your directory. Deprovisioning happens instantly.

Audit logs

Every vault event is logged and exportable to your SIEM. Full chain of custody.

Org-wide breach monitoring

Monitor all employee email addresses for data breaches. Get alerts before your users do.

Works everywhere you do

The web app works on any modern browser. The native extension enhances Chrome and Opera. Mobile apps are coming.

Chrome
Firefox
Safari
Edge
iOS (coming)
Android (coming)

Ready to take back control?

Free forever. No credit card. Takes 60 seconds to set up.

Create your free vault