zero-knowledge tools for everyday life

Your data should be yours.

Everything is encrypted on your device before anything leaves it. The server stores ciphertext. You keep the keys.

A guard dog standing watch in front of a bank vault door
the vault guard, on duty

Quiet tools, built the same way.

Each app does one job. Data never mixes, and everything is encrypted on your device before upload.

The server never sees your data.

The same chain, front to back, for every app.

  1. 01

    Keys are born on your device

    Your password never leaves the browser. Only a derived login secret is ever sent, never the key that decrypts.

  2. 02

    Records are sealed before upload

    Every entry is encrypted on your device: AES-256-GCM, under a key wrapped to you.

  3. 03

    The server stores what it cannot read

    Rows arrive as ciphertext. The server can count them. It cannot read them.

what the server sees
select * from vaults, items, journals; 5 rows, 0 readable

the honest fine print

  • No email reset. Your recovery key, shown once at signup, is the only way back.
  • Export CSV or JSON anytime. Data leaves in the clear only when you say so.
  • Logs carry event names and user ids. Never contents, never emails.

Write to us.

Questions, feedback, a hard look at our encryption, or an invitation to the beta.

hello@magnuscrypt.com