Family
One vault for the household
Invite family members into a shared vault. Everyone unlocks the same encrypted secrets with their own master password, and it stays zero-knowledge on our side.
Your passwords, sealed in a vault only you can open.
Zero-knowledge encryption on your device, plus family vaults, business secret folders and authenticator links you can share safely.
AES-256-GCM · PBKDF2 600K · Open crypto contract
Share without giving up control
Personal vault. Family vault. Team folders.
Keep your personal secrets alone, share a household vault, or hand teammates only the folders they need to get started.
Business
Secret folders for teams
Create folders for onboarding or projects, drop in passwords and secrets, then assign members. Admins control what’s added or removed; members view only.
Authenticator
Share a live code by link
Send a rotating TOTP code to someone without a VaultKeep account. Protect it with an auth code, set an expiry, and revoke it at any time.
Business onboarding
New hire opens the folder. Sees every secret they need. Can’t change a thing.
Admins create folders, assign members, and manage passwords. Members unlock the org vault and get a view-only list of what they were given, which is all a first day needs without spreading edit rights.
Engineering onboarding
- GitHub org inviteview only
- Staging VPNview only
- Slack workspaceview only
- Grafana dashboardview only
Encrypted with the org key · members cannot edit
Everything a vault should be
Designed around one rule: the server must never be able to read your secrets.
Truly zero-knowledge
Your master password never leaves your device. Everything is encrypted locally with AES-256-GCM and 600,000 PBKDF2 rounds. The server only ever stores ciphertext it cannot read.
Passwordless with passkeys
Unlock with Face ID, Touch ID, Windows Hello or a security key. Your passkey derives the key that opens the vault, so there is no master password to type.
Autofill where you log in
The browser extension saves new logins as you sign up and offers matching ones on the page. Press Alt or Option plus V to call it up, and filter by typing.
On every device
Web app, installable desktop app, Chrome and Firefox extension, iPhone and Android. One vault and one encryption contract everywhere.
Built-in authenticator
TOTP codes live beside your passwords. Import by QR or otpauth link, bring codes over from Google Authenticator, and restore deleted ones from a 90 day trash.
Encrypted backup codes
Store the one-time recovery codes every service hands you, mark them used as you go, and keep them encrypted with the rest of your vault.
Password health
Find weak, reused and expired passwords at a glance. Breach checking uses k-anonymity, so only the first five characters of a hash ever leave your device.
Strong password generator
Build long random passwords or readable passphrases, skip ambiguous characters, and save straight into the vault.
Recovery you control
A one-time recovery key is generated at signup. It is the only way back in if you forget your master password, and resetting rotates it automatically.
Also included
- Folders to organise your logins
- Move items between personal and shared vaults
- 90 day trash with one-click restore
- Import and export an encrypted backup
- Auto-lock after inactivity
- Biometric unlock on mobile
- System-wide autofill on Android
- Admin dashboard with an activity log
- Invite links with member and admin roles
- Share expiry policies for business vaults
Also from VaultKeep
SpamGuard, your digital firewall for calls
Silence spam before your phone even rings. Block numbers and whole prefixes, reject hidden and unknown callers, and keep an encrypted copy of your block list in your VaultKeep account.
Start personal. Grow into a team.
Create a free vault, invite family when you’re ready, or spin up a business org with secret folders for onboarding.