Roadmap
Where Vallkey is going.
Every phase, what's built, and what comes next. Phases overlap: we build what's ready, and check items off as they land.
Phase 0 · Done
Foundations
The security design, and the foundations everything else rests on.
- Security design and threat model (built)
- One shared core for every app, checked independently (built)
Phase 1 · Done
The vault
The vault, sync, the web vault and the browser extension.
- Vault and cloud sync (built)
- Web vault (built)
- Chrome, Edge and Firefox extension, with autofill, generator and 2FA codes (built)
- Import from every major password manager, with a report (built)
Phase 2 · In progress
Every device
Every platform, with sharing and families.
- iPhone and Android apps, with system autofill and passkeys (built)
- Windows, Mac and Linux apps (built)
- Sharing, families, legacy contacts and key transparency (built)
- Security dashboard, recovery codes and Emergency Kit (built)
- Credential Exchange import and export (built)
- Vallkey for Safari, on the Mac, iPhone and iPad (built)
- AutoFill on the Mac
Phase 3 · In progress
Plans and privacy
Plans with a price lock, the password fixer, and ways to keep your vault where you want it.
- Free, Premium and Families, with the price lock (built)
- Email aliases (built)
- Password fixer: changes passwords for you, in your browser (built)
- Local-only vaults, with a pay-once license (built)
- Self-hosting (built)
- A public bug bounty
Phase 4 · Done
Teams
Admin control without admin access.
- Organizations, groups and policies (built)
- Single sign-on over OpenID Connect and SAML, and SCIM (built)
- Audit logs, sent on to your log system (built)
- Offboarding: what someone who left could open, and changing it (built)
- A new device let in by another, or by an admin, and the key connector (built)
- Trusted contacts for recovery (built)
- Travel Mode (built)
- Sync through a folder on your own drive (built)
Phase 5 · In progress
Developers and AI
Secrets where developers and AI agents need them, with a person in control.
- Command line, with secret references for scripts and CI (built)
- SSH agent, on macOS and Linux (built)
- Service accounts (built)
- MCP server, and AI-agent logins you approve in your browser (built)
- The fixer reads unclear change pages with an on-device model (built)
- Approving an agent's login on your phone
- The SSH agent on Windows
Your passwords. Your keys. Your price.
Vallkey opens soon. Join the waitlist to hear first.