Swiss-Grade Zero-Knowledge Architecture

The Private Sanctuary For Your Digital Keys.

PassCrypt isolates and wraps your vault entirely within your local sandbox. No master passwords transit the web. Zero central database vulnerabilities.

Initialize Private VaultAudit Hashing Process
vault://passcrypt.secure.local
Search secure records…
S
Swiss Ledger Live
sovereign.key@ledger.eth
A
AWS Production Vault
iam.root.admin
G
GitHub Enterprise
ashish-crypt
I
Interactive Brokers
ibkr_invest_vault
AES-256-GCM LOCAL DECRYPTION ACTIVE
AES-256-GCM Local Cipher
Argon2id Memory-Hard Key
True Client Sandbox
Native WebCrypto Engine
Interactive Proof

Cryptography Lab

Test the math yourself. See exactly how Argon2id key splitting derives Auth and Master keys client-side. No network requests are sent.

Input parameters

A distinct 16-byte random salt generated on signup. Prevents cross-user rainbow tables.

Sandbox Memory Hashing Trace
Local Exec

Awaiting KDF Execution Trigger

Set your custom values on the left and hit the button to trigger local Sandbox computation.

WebCrypto API EngineIn-Browser Isolated Sandboxing
Architectural Principles

Military-Grade Frameworks

Every layer is designed around the core invariant: your cryptographic credentials never leave your hardware.

Zero-Knowledge Security

Your Master Password never transmits. Argon2id derives the wrapping key inside browser memory. We store encrypted ciphertext only.

Native WebCrypto Sandbox

All operations execute inside your browser's native, compiled WebCrypto runtime. Zero dependence on third-party security npm packages.

Real-time Syncing

Instant encrypted replication across all registered devices. Updates sync as base64 encryptions over zero-knowledge transport lines.

Sovereign Portability

Export all records decrypted entirely inside your sandboxed web memory into JSON or CSV. Zero vendor lock-in. Ever.

Wipe-On-Lock Invariant

Vault automatically locks and deletes data encryption keys from SessionStorage on idle timeout, tab close, or window blur.

Federated Teams & Family

Deploy isolated group environments. Manage credentials without the administrator ever holding the keys to access vaults.

Sequential Flow

Three Steps to Isolation

How your records transition from plaintext to military ciphers in under two minutes.

01

Register Identity Sandbox

Select your master password locally. The system instantly generates a unique 16-byte cryptographic salt on database registry.

02

Derive Keys On-Hardware

Your CPU processes the inputs using Argon2id. Master Key wraps the vault DEK. Auth Key hashes prove your identity.

03

Synchronize Sovereign Cipher

Your browser decrypts records instantly as they load. We store and sync encrypted blobs—meaning absolute zero tracking.

Cryptographic Audit

Verifiably Secure.

We employ strict industry-standard implementations verified by independent audit patterns. We prioritize cryptographic invariants over browser convenience.

AES-256-GCM authenticated cipher
We utilize random 96-bit nonces per password entry. Guaranteed confidentiality and cipher integrity, preventing timing attacks.
Argon2id (Winner of KDF Contest)
Memory-hard parameters (m=64MB, t=3, p=4) protect against high-performance ASIC/GPU custom brute-force rigs.
WebCrypto engine native execution
Executing exclusively in browsers native security sandbox. Safe from javascript package injections and node compromises.
Sovereign Key Architecture Flow
inputs│Master Password + Unique 16-byte Salt
↓Argon2id KDF Memory Hashing (64MB allocation)
output│64 Derived Entropy Bytes
split output: bytes [0..31] and [32..63]
path_01│bytes [0..31] (Auth Key) → HASH_SHA256 → authKeyHash
path_02│bytes [32..63] (Master Key) → Wrap/Unwrap DEK local
↓AES-256-GCM symmetric block wrapper
storage│database stores: authKeyHash · encryptedDEK · vaultCipher
🔒 The server never receives: raw master password, auth keys, master wrapping keys, decrypted DEKs, or plaintext vault logs.
Vault access

Sovereign Pricing

All plans include zero-knowledge guarantees. Tailored local infrastructure without hidden costs.

Sentry Vault

Zero-knowledge core vault security

Sandbox Free
Initialize Sentry Vault
  • 30 secure vault entries
  • Local Password generator
  • Native AES-256-GCM encryption
  • Single device sandbox
  • Community security boards
RECOMMENDED VAULT

Sovereign Vault

For individuals demanding absolute digital privacy

₹83/ month
₹999 billed annually • saves ₹189
Request Sovereign Access
  • Unlimited encrypted vault entries
  • Multi-device real-time sync
  • Two-Factor Authentication (TOTP)
  • Sovereign Decrypted Exports (JSON/CSV)
  • Configurable Idle Auto-Lock
  • Priority email response (under 4h)

Federated Vaults

Isolated premium vaults for families & elite teams

₹208/ month
₹2499 billed annually • saves ₹489
Deploy Federated Vaults
  • Everything in Sovereign
  • Up to 6 isolated member vaults
  • Individual encryption key pairs
  • Federated administration dashboard
  • Immutable append-only audit logs
  • Dedicated security advisor

Prices inclusive of GST • Secured via local Indian gateway lines

FAQ

Sovereign Questions

Need custom infrastructure details? Contact our security desk

Begin your journey
to absolute key privacy

Deploy your sandbox instance today. No credit cards required. Fully compliant, zero knowledge.

Initialize Free SandboxAudit Plans