AES-256 Encryption
All passwords are encrypted in your browser with AES-256-GCM using a key derived from your master password via PBKDF2. Your plaintext never reaches our servers.
VaultKey protects your digital life with AES-256 client-side encryption, real-time Firebase sync, and biometric unlock — available on web and Android.
Why VaultKey
A complete password manager with enterprise-grade security, built for everyone — no subscription required.
All passwords are encrypted in your browser with AES-256-GCM using a key derived from your master password via PBKDF2. Your plaintext never reaches our servers.
Firebase Firestore syncs your encrypted vault across all your devices the moment you make a change. Add on web, access on Android — instantly.
Unlock your Android vault with your fingerprint. Fast, secure access without typing your master password — backed by Android Keystore hardware security.
Organise credentials into Work, Social, Banking, Email, Shopping, Entertainment, and more. Filter by category with a single tap.
Find any credential in milliseconds. Full-text search across usernames, URLs, and categories with live filtering.
Progressive Web App works in any browser on desktop and mobile. Native Android app available as an APK. One vault, every device.
Zero-Knowledge Architecture
All encryption and decryption happens on your device. Even if our servers were compromised, your passwords remain mathematically unreadable.
Client-side AES-256-GCM encryption
Your master password derives the encryption key via PBKDF2. Only encrypted ciphertext is stored in Firestore — never your plaintext passwords.
Master password never transmitted
Your master password stays on your device at all times. We store only a random cryptographic salt to support key derivation.
Firebase encrypted at rest & in transit
All data in Google Firebase Firestore is encrypted at rest (AES-256) and in transit (TLS 1.3) by Google Cloud infrastructure.
Hardware-backed Android Keystore
On Android, your key material is protected by the hardware-backed Android Keystore, with biometric authentication required for access.
Availability
One encrypted vault, synced seamlessly across web and Android.
Works in Chrome, Firefox, Safari, and Edge. Install as a Progressive Web App for a native-like experience on any device — no app store required.
Open Web AppNative Android app with biometric unlock, offline access, and hardware-backed key storage via Android Keystore. Build from source or sideload the APK.
Request APKAbout VaultKey
VaultKey is a free, open-architecture password manager designed with a zero-knowledge security model. Your master password and plaintext credentials are never transmitted to or stored on our servers. We use Google Firebase for authentication and encrypted data storage — but only you can decrypt your vault. By using VaultKey, you agree to our Privacy Policy and Terms of Service.
Free, secure, and private by design. No subscription required.