Understand your vault.
Clear information on data, recovery and product status. No promises of absolute security.
A local vault
On Desktop, the encrypted vault stays on your computer. Local use requires neither a Cloud account nor Internet. Free covers local passwords; Lifetime Local adds local Premium without Cloud.
Two passwords, two roles
The master password opens your vault. In the Web app under development, the account password handles authentication and is separate from the master password. Account recovery does not recover a vault.
The server’s role
The Web design keeps the master password and decrypted vault data on the client. Authentication receives the account password over HTTPS and stores a hash. Sync works with encrypted data. Web/sync are not offered as an available service; this is neither certification nor an independent audit.
Backup and recovery
Keep backups in a separate location and verify restore with a test vault. Current recovery still requires the master password. A future kit for a forgotten master password is planned but unavailable.
What you can try today
Desktop beta 0.5.3 for Windows x64, using synthetic data only, unsigned. Minimum memory requirements and every Windows version are not confirmed here. Purchases, Pro Cloud, extras, Family/sharing and the local extension are not commercially available. The local bridge and autofill are planned.
Clear plan boundaries
Lifetime Local is a one-off purchase for local Premium during the product’s commercial lifetime. It does not include Cloud. Cancelling Pro Cloud retains the paid period; the design then provides 30 days of Web read/export access. Operational payments, cancellation and the final retention policy require validation before billing. See current prices and quotas on the home page.
Feedback and support privacy
Feedback is private by default. A comment is required; name, email and ratings are optional. Support requires an email for a reply. Publication requires explicit consent and administrative approval; publishing a name requires separate permission. The withdrawal code lets you revoke consent. Messages are used to respond and improve the product; aggregate analysis may support academic documentation without reproducing messages or personal data. The controller, privacy contact and final retention period must be completed before public availability. Email notifications do not include full message content.
Help and reporting issues
Use the support form for technical issues or choose Privacy or security for a confidential report. Do not publish vulnerability details in feedback or include passwords, keys or vault contents.