Password manager · Zero-knowledge
Valtira encrypts your passwords, notes and 2FA codes on your device — before anything is saved or synced. The key stays with you. Not with us.
Free during early access · No account needed to start
Zero-knowledge architecture
Valtira never needs your master password on a server. It turns it into keys on your device, and only encrypted data is ever stored or synced.
Typed on your device. Never stored, never sent.
Argon2id with 64 MiB of memory makes every guess expensive.
A random 256-bit key, unlocked only with your master password or recovery key.
Every item is sealed with AES-256-GCM and bound to its identity.
Our servers store ciphertext they cannot read.
AQHx9…c7Qe AQF2m…9kLr AQG8s…Tz3w Encrypted blobs, item counts and timestamps — never names, URLs, usernames or passwords.
Built for everyday calm
Logins, secure notes, cards, identities, Wi-Fi, API keys, licenses and recovery codes — organized with favorites, tags and categories, and found instantly with local search.
Passwords and passphrases from your browser’s cryptographic random generator — with the options you actually need, and nothing stored.
Try the generator
This runs entirely in your browser. Nothing is sent or saved.
Find reused, weak, old or insecure logins. The analysis runs locally. An optional breach check sends only a 5-character hash prefix — never your password.
Valtira uses passkeys with the WebAuthn PRF extension for Windows Hello, Touch ID, Face ID and Android biometrics. If your browser or device can’t do it securely, we don’t fake it: your master password is the fallback.
Encrypted sync keeps your devices up to date. Conflicts never overwrite silently — both versions are kept. Remove a lost device and it can no longer sync.
Store TOTP secrets inside the encrypted item and get live 6-digit codes. Convenient — and we explain the trade-off honestly.
Devices
We only call something available when it works. Here is where Valtira runs today.
Current Chrome, Edge, Firefox and Safari on desktop and mobile. Installable and usable offline.
Find and fill logins on the current site — only when you click, never automatically.
Native app with fingerprint unlock and protected screens.
Native app with Face ID and Keychain protection.
Privacy by design
No. Your vault is encrypted on your device with a key derived from your master password, which we never receive. Our servers only store encrypted data they cannot decrypt. As with every web app, you trust the code your browser loads — which is why we document the architecture openly and load no third-party scripts.
You can open your vault with the recovery key you saved during setup and choose a new master password. If both the master password and the recovery key are lost, nobody — including Kunz Systems — can decrypt the vault. That is the price of real zero-knowledge protection, so please keep your recovery key safe.
Yes. After setup your encrypted vault lives on your device and the app is cached, so you can open and edit it without an internet connection. With sync enabled, changes are uploaded when you are back online.
Valtira creates a passkey on your device and uses the WebAuthn PRF extension: after you verify with your fingerprint, face or device PIN, the authenticator releases a secret that unlocks a copy of your vault key. Nothing biometric ever reaches Valtira. If your device or browser doesn’t support this securely, the option is not offered. Every 14 days you confirm your master password so you don’t forget it.
In your browser’s storage on your device, always encrypted. If you turn on sync, encrypted copies are stored on our sync servers so your other devices can download them. Nothing readable is stored anywhere.
Yes. You can create an encrypted backup file at any time and restore it without an account. You can also export CSV or JSON in plain text after confirming your master password and a clear warning.
Yes. Valtira imports CSV exports from Chrome, Edge, Firefox and Safari, and exports from Bitwarden, 1Password and LastPass. Files are processed locally and never uploaded.
Not yet. Valtira uses established, audited cryptographic building blocks (WebCrypto, libsodium) and a documented design, and an independent audit is planned before we leave early access. We will publish the results.
Create your encrypted vault in a minute. No account required to start.
Create your vault