Every credential is encrypted with AES-256-GCM using keys derived from your master password, and stored only on your device. Data never leaves your machine. No cloud. No server. No plaintext.
All records are encrypted with AES-256-GCM via the Web Crypto API. Keys derive from PBKDF2-SHA256 (310,000 iterations). Zero cloud exposure.
ENCRYPTED AT RESTFive consecutive failed master password attempts trigger a hard circuit breaker: all input locks for 60 seconds with a red pulsing threat state.
CIRCUIT BREAKERA full interactive command system — help, scan, generate, search, status, clear, lock — with live color-coded system logs.
7 DIRECTIVESMulti-parameter indexing over platform name and username. Results stream instantly as you type, zero latency.
REAL-TIME INDEXAny credential copied to the clipboard is automatically purged after 30 seconds, mitigating memory-sniffing exploits.
30s WIPEScans the vault for weak passwords (under 12 chars) and reused credentials, flagging every vulnerability with severity.
HEALTH CHECK