KeyVecta

by CoreVecta

A password manager with no server to trust

Planned Android

Passwords, passkeys, TOTP, and secret notes in an end-to-end encrypted vault that syncs through storage you control. No company server, no account, no subscription holding your secrets hostage. Sharing and emergency access work without a server, and the app is honest about exactly what that means.

This app is planned. The capabilities and screens below describe the intended product and its design direction - it is not a shipped app yet, and nothing here is a working build.

Design preview

Design-stage previews of the intended app, not real-build screenshots - this app is not built yet.

One encrypted vault you own, on the device. Each login shows its password strength in bits.
One encrypted vault you own, on the device. Each login shows its password strength in bits.
The vault audits its own health on the device, flagging weak, reused, stale, and common-list passwords, worst first.
The vault audits its own health on the device, flagging weak, reused, stale, and common-list passwords, worst first.
Encrypted at rest with Argon2id and XChaCha20-Poly1305. The passphrase is never stored, and a wrong one fails cleanly with no partial read.
Encrypted at rest with Argon2id and XChaCha20-Poly1305. The passphrase is never stored, and a wrong one fails cleanly with no partial read.
No server to breach and no subscription. Zero-knowledge, fills only the exact site, and family can recover it with Shamir sharing, no vendor.
No server to breach and no subscription. Zero-knowledge, fills only the exact site, and family can recover it with Shamir sharing, no vendor.
One encrypted file you own. It fills your logins, audits its own health, and survives your worst day.
One encrypted file you own. It fills your logins, audits its own health, and survives your worst day.

What it does

No server, by design

The vault is a file you own, encrypted with keys derived from your master password. Sync rides your own storage. Nothing phones home.

Emergency access without a company in the middle

Split a recovery key among people you trust. Any chosen quorum of them can reconstruct it, offline, with printable share cards. No waiting-period server deciding your emergency.

Breach checking, offline

Breach packs bring k-anonymized hash data to your device, so checking a password never transmits it, or any part of it, anywhere.

Honest sharing

Shared items are encrypted to the recipient. Expiry is cooperative and the UI says so. True revocation is rotation, one tap away.

Developer line

A desktop CLI injects secrets into processes and environments, scans repos for leaked keys, and inventories certificates, all without weakening the vault format.

Try it: breach checking without transmitting anything

This is the actual lookup Vault uses, running in your browser on a five-bucket demo set. Your input is hashed locally; the first five characters select a bucket; the rest is compared inside it. Open your browser's network tab and watch: nothing leaves this page.

Demo only: five buckets, fabricated entries. The real packs carry millions, built the same way, checked the same way, equally offline.

Knowledge packs

The catalog as it actually stands. Packs ship to users only after their expert review clears.

Pricing shape

Free

The full credential manager, forever

Free means free: no account, no trial clock, nothing expires.

Paid

  • Pro: multi-vault, breach packs, family
  • Team tier for organizations

Final prices land per market at launch. What you buy keeps working offline, forever.

Questions

What if I lose my master password?

Set up the emergency kit: a recovery key split across trusted people. Without it, nobody can decrypt your vault, including us. That's the point.

The CoreVecta promise

Like every CoreVecta app, KeyVecta works fully offline, anchors its answers to verifiable sources, and sends nothing anywhere. There is no server to receive it. Knowledge packs state their review status on their face, and packs touching high-stakes domains are reviewed by credentialed professionals before they're labeled ready.

← All apps