Generator
Strong random passwords and passphrases with site-specific rules.
Password manager
Every password strong. None of them memorized.
A secure password vault that encrypts on your device, fills only on the right site, and helps you move to passkeys wherever you can.
Generator
tR7#q2Lm$v9X!kWz4ePjLength20
A–Za–z0–9!@#No look-alikes
Estimated strength~128 bits · very strong
Exact-match autofill
Fills only on the domain a credential belongs to; warns on look-alike sites.
Health checks
Weak, reused and old passwords are found on your device, not on our servers.
Breach alerts
Exposure checks use k-anonymous hash prefixes; plaintext never leaves your device.
Secure sharing
Share a single login with someone you trust, and revoke it any time.
Easy import
Import from browsers and other managers; files are parsed and encrypted locally.
Beyond passwords
One vault for everything you sign in with.
Strong, unique, filled for you
Generate, store and autofill passwords for every site. Weak, reused and exposed passwords are flagged on your device.
Encrypted on device · AES-256-GCM
Bank of Example
login · personal
- Username
- alex@example.com
- Password
- ••••••••••••••••
- Strength
- Very strong · 112 bits
server view: { v:3, alg:"A256GCM", iv:"9f2c…", ct:"Qm9mL…" }
Passwordless and phishing-resistant
Create and sync passkeys across your devices. Private keys are bound to the real site, so a look-alike page can't use them.
Encrypted on device · AES-256-GCM
github.com
passkey · synced
- Relying party
- github.com
- Credential
- ES256 · discoverable
- Last used
- Today, 09:41
server view: { v:3, alg:"A256GCM", iv:"9f2c…", ct:"Qm9mL…" }
API keys and tokens, out of your code
Store tokens and environment credentials, inject them at runtime, and prefer short-lived credentials over permanent ones.
Encrypted on device · AES-256-GCM
prod / payments
secret · 3 values
- STRIPE_KEY
- rk_live_••••••••••
- Rotation
- Every 30 days
- Access
- deploy-bot · ttl 15m
server view: { v:3, alg:"A256GCM", iv:"9f2c…", ct:"Qm9mL…" }
Documents and recovery, in one place
Keep identity documents, recovery codes and payment cards encrypted, and share them with a trusted person when needed.
Encrypted on device · AES-256-GCM
Passport
identity · encrypted file
- Holder
- A. Morgan
- Number
- U•••••••
- Expires
- In 4 years
server view: { v:3, alg:"A256GCM", iv:"9f2c…", ct:"Qm9mL…" }
SSH keys that never sit on disk
Generate and use SSH keys through the ARKCRON agent. Approve each use with a passkey or biometric, per host.
Encrypted on device · AES-256-GCM
deploy@prod-eu
ssh · ed25519
- Public key
- ssh-ed25519 AAAAC3Nz…
- Private key
- Stored in vault
- Approval
- Biometric per session
server view: { v:3, alg:"A256GCM", iv:"9f2c…", ct:"Qm9mL…" }
Start with one vault. Keep it for what comes next.
Free for individuals. No card required. Your keys stay on your devices from the first minute.