Zero-knowledge ยท open source

Your passwords,
yours alone.

Bitvaulter locks everything on your device before it ever leaves. We store sealed boxes โ€” you hold the only key. Open source and self-hostable โ€” run it yourself with every feature, free.

Open your vault See how it works

๐Ÿ”’ End-to-end encrypted. Not even we can read what's inside.

Everything you keep, kept safe

One private place for the things you can't afford to lose โ€” each encrypted, each easy to find.

๐Ÿ”‘

Passwords & logins

Save every login, autofill it anywhere, and never reuse a weak password again.

๐Ÿ’ณ

Bank cards

Card numbers, expiry and security codes โ€” copied in a tap, hidden by default.

๐Ÿ“ท

Photos & documents

Passport, ID, insurance โ€” encrypted on your device before upload. Not in your camera roll.

๐Ÿ“

Private notes

Anything written down that needs to stay between you and you.

๐Ÿ”ข

Sign-in codes

Built-in authenticator (TOTP) for the 6-digit codes sites ask for after your password.

๐Ÿชช

Identities

Save your name, address and details once โ€” every field copied in a tap.

๐ŸŽฒ

Strong generator

Make long, unique passwords with a tap โ€” length and symbols your call.

๐Ÿ›ก๏ธ

Safety checkup

Spot reused, weak or breached passwords โ€” checked privately on your device.

๐Ÿ“ฅ

Import & export

Bring your vault over from Bitwarden, and take an encrypted backup any time.

๐Ÿ“ด

Works offline

Install it like an app and read your vault even with no connection.

How zero-knowledge works

The lock happens on your device. The key never leaves it.

You hold the key

Your secret word turns into encryption keys right on your device. It's never sent anywhere.

Everything is sealed locally

Each item is encrypted with AES-256 before it leaves your device โ€” passwords, files, notes, all of it.

We only ever see ciphertext

The server stores sealed boxes it can't open. A breach of our servers reveals nothing readable.

The trade we make for real privacy: because only you hold the key, there's no back door โ€” if you forget your secret word, no one (including us) can open your vault. Keep it safe, and keep a backup.

Don't take our word for it โ€” check it yourself

For you and your family โ€” and for developers and teams.

Zero-knowledge by design

Your data is encrypted on your device before it ever reaches us. We hold only sealed ciphertext โ€” there's no key on our side to unlock it.

Open source

The core is AGPL-3.0 and the full source is public โ€” read the exact code that touches your secrets.

Self-hostable

Run the whole stack on hardware you control โ€” your data, your keys, your call on where it lives.

Free to self-host

Self-host the open-source core and get every feature, free. Prefer hosted? A free tier covers everyday logins; paid adds the authenticator, file storage, reports and sharing.

Honest pricing

Self-host the open-source core free, forever โ€” with every feature. Prefer we run it for you? The free hosted tier covers everyday logins, cards and notes; paid unlocks the authenticator, file storage, security reports and sharing โ€” about 25% below Bitwarden's hosted plans.

Free

$0
  • Self-host: every feature, free (AGPL-3.0)
  • Hosted free: passwords, cards, notes, identities, generator & autofill
  • Unlimited passwords, devices & sync
  • Import & encrypted export
Get started
Most popular

Premium

$1.24 / mo
  • We host & sync it for you โ€” nothing to maintain
  • Built-in authenticator (2FA codes)
  • Encrypted photos & documents (file storage)
  • Security & breach reports ยท priority support
Start free, upgrade anytime

Family ยท soon

$2.99 / mo ยท up to 6
  • Everything in Premium, for 6 people
  • Share Projects with your household
  • One bill for everyone
  • Manage everyone in one place
Start free today

Teams & Business ยท soon

$3 / user / mo
  • Share Projects, roles & admin controls
  • CLI, machine tokens & CI secret references (planned)
  • Enterprise SSO & policies (planned)
  • Self-host today, or hosted soon
Talk to us

Self-hosting is always free under AGPL-3.0, with every feature. Hosted prices are about 25% below Bitwarden's hosted plans; shown per month, billed yearly. Monthly billing is available in-app.

Security you can verify

We describe exactly how it works โ€” and what it doesn't protect against.

Strong, standard crypto

Keys derived with PBKDF2-SHA256 (600k iterations); items sealed with AES-256 and authenticated (encrypt-then-MAC). The full design is public.

Private breach checks

Password breach checks use k-anonymity โ€” only a short hash prefix is sent, never your password or its full hash.

Honest about limits

An independent security audit and penetration test are planned before general availability. We won't claim what hasn't happened yet.

Questions, answered

What does "zero-knowledge" actually mean?

Your data is encrypted on your device with a key derived from your secret word. We only ever receive and store ciphertext โ€” we have no way to read your passwords, files, or notes.

What happens if I forget my secret word?

Because only you hold the key, there's no recovery and no back door. If you forget it, your vault can't be opened โ€” by anyone. We'll always remind you to keep it safe and to keep an encrypted backup.

Is it really open source?

Yes โ€” the core is licensed under AGPL-3.0, so anyone can read, audit, and self-host it. A commercial license is available for organizations that need it.

Can I self-host it?

Yes โ€” the open-source core (AGPL-3.0) is yours to run, and every feature is unlocked when you self-host. There's no cost and no feature gate.

Can I move over from Bitwarden?

Yes. Import a Bitwarden JSON export directly, and export an encrypted backup of your Bitvaulter vault whenever you like.

Take back control of your passwords

Set up your private vault in a couple of minutes. Free to start, free to self-host.

Open your vault