Your master password never leaves your browser.
Kanical Vault encrypts everything before it's sent anywhere — passwords, API keys, secure notes, and cards. Start free, no card required.
the actual derivation, not a marketing claim
AES-256-GCM · stays in your browser, in memory only
the only thing that reaches the server
One vault. Everything in it, actually private.
Every item type you actually use
Logins, API keys, secure notes, and cards — one vault, one search, no separate tools bolted together.
A browser extension that fills forms
Unlock once, then autofill and capture new logins as you sign up for things, without copy-pasting a password manager into a text field.
Take your vault with you
Export an encrypted Kanical backup, or a CSV for 1Password, Bitwarden, LastPass, and others. Nothing about leaving is harder than everything about staying.
Don't take our word for it
We can't hand your data to anyone — not a hacker, not a court order, not an employee having a bad day — because we never have it in the first place. The encryption above runs before your account exists on our servers. What reaches us is ciphertext and a key we can't invert. Read the exact derivation on the security page instead of trusting a badge.