Password manager
A password manager that cannot read its own contents
Everything in your vault is encrypted in your browser, with a vault passphrase that our server never receives. What we store is unreadable to us, and just as unreadable to anyone who might ever break in.
Three keys, each with its own job
Signing in and being able to read your data are deliberately two separate things. A stolen password gets nowhere without your phone, and a hijacked session gets nowhere without your vault passphrase.
Proves who you are
Sign-in password
The server only stores an Argon2id hash of it, never the password itself.
Proves it is really you
Your phone
Two-step verification with the WWWveilig app is mandatory, for everyone.
Decrypts your data
Vault passphrase
Never leaves your device. The server does not have it and has no way to get it.
Forgotten your vault passphrase?
Then nobody can recover it: not you, not us, not an administrator. That is exactly the point. This is why you get an emergency kit with a recovery key when you set up your account. Print it and keep it somewhere safe, not next to your vault passphrase.
Made for organisations
Each organisation manages itself: its own users, its own roles, its own shared vaults.
Shared vaults
Share passwords with your team. Shared vaults are encrypted too, with keys that only your own people hold.
Roles
Owner, manager or member. Your own administrators decide who can do what.
Access log
See who opened which password, and when. That log belongs to you; we cannot see it.
Windows AD integration
Create users automatically from your Active Directory server.
CSV import
Move over from another password manager or a spreadsheet.
Browser extension
Fills in sign-in details from your vault, in Chrome and Firefox.
Mobile app
For iPhone and Android. Unlock your vault with your fingerprint or face.
Your data stays yours
If an account is paused, nothing is deleted. Reactivating it restores access straight away.
We cannot read it either
As the supplier, we see counts and dates: enough to run the service. We never get to see passwords, notes or vault keys.
Get started
Accounts are set up per organisation. Your first administrator receives an activation link and chooses their own password, phone and vault passphrase; we never see those.