Family
One vault for the household
Invite family members into a shared vault. Everyone unlocks the same encrypted secrets with their own master password — still zero-knowledge on our side.
Your passwords, sealed in a vault only you can open.
Zero-knowledge encryption on your device — plus family vaults, business secret folders, and authenticator links you can share safely.
AES-256-GCM · PBKDF2 600K · Open crypto contract
Share without giving up control
Personal vault. Family vault. Team folders.
Keep your personal secrets alone, share a household vault, or hand teammates only the folders they need to get started.
Business
Secret folders for teams
Create folders for onboarding or projects, drop in passwords and secrets, then assign members. Admins control what’s added or removed; members view only.
Authenticator
Share a live code by link
Send a rotating TOTP code to someone who doesn’t need a VaultKeep account. Protect it with an auth code, set an expiry, and revoke anytime.
Business onboarding
New hire opens the folder. Sees every secret they need. Can’t change a thing.
Admins create folders, assign members, and manage passwords. Members unlock the org vault and get a view-only list of what they were given — perfect for day-one access without spreading edit rights.
Engineering onboarding
- GitHub org inviteview only
- Staging VPNview only
- Slack workspaceview only
- 1Password → VaultKeepview only
Encrypted with the org key · members cannot edit
Everything a vault should be
Designed around one rule: the server must never be able to read your secrets.
Truly zero-knowledge
Your master password never leaves your device. Everything is encrypted locally with AES-256-GCM — the server only ever stores ciphertext it cannot read.
Passwordless with passkeys
Unlock with Face ID, Touch ID, or a security key. Your passkey derives the key that opens your vault — no master password typing required.
Autofill everywhere
The browser extension captures new logins automatically and suggests saved ones right on the page, with a clean dropdown that beats the browser’s own.
On every device
Web, installable app, Chrome/Firefox extension, and mobile — the same vault, the same encryption contract, wherever you are.
Built-in authenticator
TOTP codes live next to your passwords, with QR import, shareable live codes, encrypted backup codes, and a 90-day trash for accidental deletes.
Recovery done right
A one-time recovery key is generated at signup — the only way back in if you forget your master password. Resetting rotates it automatically.
Also from VaultKeep
SpamGuard — your digital firewall for calls
Silence spam before your phone even rings. Block numbers and whole prefixes, reject hidden and unknown callers, and keep an encrypted copy of your block list in your VaultKeep account.
Start personal. Grow into a team.
Create a free vault, invite family when you’re ready, or spin up a business org with secret folders for onboarding.