The Primitives
Named. Audited. Nothing Hand-Rolled.
Argon2id
Turns your master password into a key that costs an attacker memory and time for every guess.
XChaCha20-Poly1305
Encrypts the vault on disk and in transit. Tamper with a byte and the ciphertext refuses to open.
Ed25519
Signs each surface’s identity, so a device proves who it is without a password.
ML-KEM-768
The post-quantum half of the hybrid key exchange. What is recorded today stays closed to tomorrow’s machine.
OPAQUE
Lets you prove the master password without sending it. Not even a hash reaches us.
Secure Enclave · TPM
Wraps the keys at rest inside the chip on your Mac, your PC and your server. Copy the disk, get a brick.
In The Cloud
Nothing To Steal, Not Even By Its Guardians
Locked Before It Leaves
A breach, an insider or a subpoena gets noise, never your passwords.
We Can Read Nothing, Only Wipe
The one thing the cloud can do to your data is delete or lock a device you marked lost. That is the feature.
Your Master Password Stays Yours
Designed so it never has to reach our servers.
On Your Machines
Locked At Rest, Proven Without A Password
Locked At Rest
The vault is encrypted on disk, with its keys tied to your device’s hardware.
Quick To Lock
Idle, or your computer locks: the vault locks and the keys leave memory.
Server Identity
A Tetra server proves who it is from its own hardware, not a password.
Honestly Framed
Not unhackable. Nothing is. Encrypted, hardware-bound, fast to lock.
When It Goes Wrong
Nothing Of The Old Identity Survives
Identity Revoked
Its place in your vault is dead, and nothing can revive it.
Access Keys Pulled
Gone from every machine that trusted it.
Credentials Reset
Reset at the provider, never on the machine.
Machine Rebuilt
Wiped and rebuilt clean again before it is allowed back.
If You Have A User’s Email Address
You Can Unlock The Download
No Credit Card Required
Setup In Less Than 3 Minutes