VaultKeepR is a decentralized, open-source password manager where everything is encrypted client-side using XChaCha20-Poly1305 and Argon2id before leaving your device. Unlike most alternatives, it encrypts metadata too -- device names, sync data, and beneficiary info never exist in plaintext on any server.
Vault data is stored on IPFS (content-addressed, no central database). Cross-device sync uses encrypted CRDTs (Automerge) with no server involved in the merge. Vault recovery is handled via Shamir Secret Sharing (3-of-5).
Unique features include on-chain digital inheritance via smart contracts on Base L2 (gasless, ERC-4337), built-in TOTP authenticator, breach monitoring via HIBP k-anonymity, encrypted document vault with NFC scanning, and email alias generation.
Available on Chrome, Firefox, and iOS. Android is in private beta. Built by a solo developer. Fully open-source, zero telemetry.
Features
- Client-side encryption (XChaCha20-Poly1305 + Argon2id)
- Decentralized IPFS storage
- Encrypted CRDT cross-device sync
- On-chain digital inheritance (Base L2)
- Shamir Secret Sharing recovery (3-of-5)
- Built-in TOTP authenticator
- Breach monitoring (HIBP)
- Password health scoring
- Encrypted document vault
- Email alias generation
- Ephemeral secure sharing
- NFC identity scanning (iOS)