Trust center

Built so even we can't read your vault.

How Vallkey keeps your vault private, what our servers can and can't see, and where to read every detail.

What our servers see

Your email address
Encrypted vaults, padded so sizes reveal little
When your devices sync, and their encrypted names
Your subscription

What they never see

Your master password, or anything to guess it from
Your Secret Key or any decryption key
Your passwords, notes, cards and files
Which websites you have accounts on

Security, simply

We can't see your passwords. Or the websites they're for.

End-to-end encryption

Every item is encrypted on your device with its own key. Only your master password and Secret Key open them, and neither ever leaves your devices.

A password that stays home

Your master password never leaves your device, not even hashed. Your device proves it knows it without the server learning anything a breach could crack.

Secret Key

A 128-bit key made on your first device and never sent to us. Even a weak master password can't be guessed from a stolen vault without it.

Encrypted metadata

Titles, website addresses, tags and device names are encrypted, not just passwords.

Signed vaults and key transparency

Every vault's contents are signed, and account keys are published in an append-only log your devices check, so a server can't swap keys or roll a vault back unnoticed.

Post-quantum sharing

Vaults you share are sealed with post-quantum encryption, so what's recorded today stays private against tomorrow's quantum computers.

Go deeper

Your passwords. Your keys. Your price.

Vallkey opens soon. Join the waitlist to hear first.

Join the waitlist