zero-knowledge tools for everyday life
Your data should be yours.
Everything is encrypted on your device before anything leaves it. The server stores ciphertext. You keep the keys.
Quiet tools, built the same way.
Each app does one job. Data never mixes, and everything is encrypted on your device before upload.
The server never sees your data.
The same chain, front to back, for every app.
-
01
Keys are born on your device
Your password never leaves the browser. Only a derived login secret is ever sent, never the key that decrypts.
-
02
Records are sealed before upload
Every entry is encrypted on your device: AES-256-GCM, under a key wrapped to you.
-
03
The server stores what it cannot read
Rows arrive as ciphertext. The server can count them. It cannot read them.
select * from vaults, items, journals;
5 rows, 0 readable
the honest fine print
- No email reset. Your recovery key, shown once at signup, is the only way back.
- Export CSV or JSON anytime. Data leaves in the clear only when you say so.
- Logs carry event names and user ids. Never contents, never emails.
Write to us.
Questions, feedback, a hard look at our encryption, or an invitation to the beta.
hello@magnuscrypt.com