Zero-knowledge · Australian-built
The vault
only you
can open.
Passwords, passkeys, cards, identities, SSH keys — all encrypted on your device before they reach our servers. We store ciphertext. You hold the only key.
BSB · TFN · ABN · Medicare · 13 item types · Autofill · Passkeys · Breach monitoring
Architecture
Security that can't be undone.
🔑
Your passphrase, your key
Argon2id (64 MB, 3 iterations) derives your encryption keys on your device. A split KDF means your auth verifier is cryptographically separate from your master key — even a server breach exposes nothing decryptable.
🔒
Encrypted before it leaves
Every item is encrypted with XChaCha20-Poly1305 in your browser. Each item has its own random key, wrapped by your account key, which is wrapped by your master key. Three layers. None on our servers.
💣
Detonate if compromised
Set a failed-login threshold (3–20 attempts). Exceed it and your vault self-destructs permanently. No backdoor, no override, no way for us to stop it. Configurable in Account → Security.
🔑
Account recovery, zero-knowledge
Generate a recovery code at any time. If you forget your passphrase, use the code at vaulis.vercel.app/recover to set a new one — your vault is preserved. The recovery key re-wraps your account key on your device; we never see it.
🛡️
Passkeys cross-platform
The extension acts as a FIDO2 authenticator. Passkeys are stored encrypted in your vault — not locked to Apple or Google. They follow you to any device where you're logged in to Vaulis.
👥
Zero-knowledge sharing
Share via X25519 sealed-box encryption. Only the recipient can unwrap their copy of the item key. You can restrict org members to a specific folder or tag. Key rotation removes access at the cryptographic level.
Features
Everything in one place.
🔐 Smart autofill
- ·Single exact match fills and submits instantly — no picker, no clicks
- ·Multiple matches show a picker filtered to exact domain — search across all vault items
- ·Multi-step logins (AWS Account ID, Qantas FF number) — AI classifies and captures extra fields automatically
- ·Right-click context menu: Fill, Generate password, Never save for this site
- ·Smart save/update — no duplicates. Updates existing credentials when extra fields or passwords change
- ·Custom fields with exact HTML field names for precise matching on complex forms
📂 Vault organisation
- ·Folders and tags with sidebar — click to filter, drag to organise
- ·Sort by Name, Type, Last updated, or Date added (ascending/descending)
- ·Favourites filter for quick access to frequently-used credentials
- ·Trash with 30-day recovery — Restore or Delete forever
- ·⚠ Breached and ⚠ Duplicate flags shown inline on vault items
- ·Password history — timestamps of all previous passwords per item
🛡️ Security tools
- ·Security score (0–100) with per-criterion breakdown and direct action buttons
- ·Inline breach check — runs on account page, k-anonymity HIBP, results show without leaving the page
- ·TOTP live codes built in — no separate authenticator app needed
- ·2FA, recovery code, active session management, login notifications
- ·Emergency access with configurable waiting period
- ·Auto-detonate on brute force (3–20 attempt threshold)
👥 Sharing & teams
- ·Share individual items or collections with end-to-end encrypted key wrapping
- ·Access scope per member: Full vault, Folder only, or Tag only
- ·Edit member role and scope inline — no separate admin page
- ·Collection key rotation on member removal — cryptographic access revocation
- ·Resend invite with one click — shows copyable link as backup
- ·Pending invites with expiry, revoke, and resend controls
13 item types
What you can store.
🔑
Logins
Username, password, URL, TOTP, extra fields
🛡️
Passkeys
WebAuthn / FIDO2 — cross-platform
📲
TOTP / 2FA
Live rotating codes in-vault
💳
Cards
Credit & debit with visual card art
🏦
Bank accounts
BSB, IBAN, SWIFT, routing number
🪪
Identity
TFN, ABN, Medicare, address — AU fields
📘
Passports
All fields, all jurisdictions
🚗
Licences
Driver's licence with state & class
🔐
SSH keys
Public/private keypairs + passphrase
📝
Secure notes
Anything that needs encrypting
📄
Documents
Policies, certs, contracts, references
💿
Software
Licence keys & registrations
🏥
Medical
Records, meds, allergies, blood type
+ Custom fields on any item — Text, Password, Env var — with exact field names for autofill matching
Browser extension
Works where you work.
Autofill, save, and generate passwords directly in your browser. Manifest V3, all major browsers.
Requires Apple Developer account — in development
Coming soonHow to install (Chrome / Edge)
- 1.Download and unzip the file above
- 2.Open
chrome://extensions(oredge://extensions) - 3.Enable Developer mode (top right toggle)
- 4.Click Load unpacked and select the unzipped folder
- 5.Pin the Vaulis icon to your toolbar
app.netflix.com
ian@example.com
AWS Console
ian@hindle.biz · Account ID: 12345…
github.com
Passkey
Gmail
ian@gmail.com
Pricing
Start free. Grow into it.
No credit card required for the free plan. All plans include zero-knowledge encryption.
Personal
Premium
$3.99/month
- ·Unlimited items
- ·Unlimited devices
- ·TOTP codes
- ·Passkeys
- ·Breach monitoring
- ·Vault export
- ·Priority support
Family
$6.99/month
- ·Everything in Premium
- ·Up to 6 family members
- ·Shared collections
- ·Emergency access
Business
Business
$5.00/user/month
- ·Everything in Premium
- ·Unlimited sharing
- ·Org management
- ·Audit log
- ·Admin console
- ·SSO (coming soon)
🇦🇺
Built for Australia
BSB, TFN, ABN, Medicare number built into identity and bank items. Invoiced in AUD. Data stored on AWS Sydney. No foreign exchange risk.
📦
Import from anywhere
Bitwarden, 1Password, LastPass, Chrome, Dashlane, Keeper, KeePass, and more — 10 formats. Export to CSV or JSON any time. Your data is always yours.
📱
Works everywhere
Web vault, browser extension (Edge, Chrome, Brave, Firefox), iOS and Android PWA with Add to Home Screen. Native app with system autofill in development.
Start securing your digital life.
Free plan, no credit card, no expiry. Takes 60 seconds to set up.
Create free accountAlready have an account? Sign in