Security
How we protect you
How we keep your data yours — the architecture, in plain language.
Encryption
AES-256 applied on your device, before anything syncs, with a key derived from your master password.
Zero knowledge
Our servers only ever hold an encrypted blob — not your passwords, not your master password, not your key.
Open to scrutiny
The app is open to independent testing through our public bug-bounty program, and we publish what we fix.