Same vault. Same encryption. More you can do with it.

• ✓

  No Vaulted server holds your vault

  Your encrypted vault stays with Bitwarden or on your own server, exactly where it is today. There's no Vaulted copy to leak.

• ✓

  Your encryption doesn't change

  Vaulted uses Bitwarden's documented end-to-end encryption. Your vault is decrypted only on your device, and your master password is never stored.

• ✓

  No third-party services

  No analytics, trackers, advertising or third-party SDKs. The app talks to your vault server; website icons come straight from each site, and you can switch them off. Crash reports go only if you choose, after you've read them.

• ✓

  Guarded on your device

  Vaulted locks after 15 minutes idle and whenever Windows locks or sleeps. Copied passwords clear after 20 seconds, and your vault's keys stay encrypted in memory between uses.

Nothing else. No analytics, telemetry, advertising or third-party SDKs. You can confirm this with a network monitor.

• Unchanged

  Your vault server

  Your vault, encrypted end to end, exactly as today. Vaulted's extras (tags, links, importance, expiry dates and review decisions) are saved inside your vault in one encrypted field per item, with folder and tag order in two archived items. They're encrypted, synced and backed up like everything else.

• Encrypted

  Your device

  A copy of what your server sent, still encrypted, and sealed again by Windows for your user account (DPAPI). Settings and timed pins stay on the device. Signing out deletes the copy and its key.

• Nothing from your vault

  Vaulted's servers

  They sell licenses, deliver updates and receive the crash reports you choose to send. They never receive your vault, your master password or your vault account.

  Licenses

  One purchase can cover more than one platform. Stripe takes the payment, so card details never reach us. We keep the license, the platforms it covers and, for each device you activate, its platform, app version and a random ID. We email your key to the address you paid with, then keep only a one-way fingerprint of that address, so the key can be sent again to it and no other. No name.

  Updates

  Copies installed from this site update from here, through Windows App Installer. Copies from an app store update through that store.

  Launch list

  Sales haven't opened yet. Until they do, the only personal data we hold is the email addresses people leave to hear about launches.

  Crash reports

  Only the reports you choose to send, after reading them: error types, error codes and where in Vaulted's code they happened. Nothing that identifies you. They're deleted after 90 days.

• Master passwordRead from a protected input, used in memory to derive your keys, then wiped. Never written to disk.
• EncryptionBitwarden's documented protocol: PBKDF2-SHA256 or Argon2id, whichever your account uses; AES-256 with an HMAC-SHA256 check, verified in constant time before anything is decrypted; RSA-OAEP for shared organization keys. Built on .NET's standard cryptography, plus the Konscious library for Argon2id. No homemade algorithms.
• Keys in memoryYour vault's keys stay encrypted in memory except while they're in use. Other programs running under your account can't read Vaulted's memory unless they run as administrator.
• Auto-lockLocks after 15 minutes without activity by default, and straight away when Windows locks, sleeps, signs out or shuts down. Locking discards decrypted items, notes and one-time-code secrets and clears them from the screen.
• ClipboardCopied passwords and codes are cleared after 20 seconds, or as soon as you lock.
• Windows HelloOptional. Your vault key is wrapped by a Windows Hello key that can't be exported, so your master password is never saved.
• HTTPS onlySelf-hosted servers must use HTTPS, and certificate checks are never switched off.
• No logs of your dataUnexpected errors are kept as a type, a code and where in Vaulted's code they happened. Error messages, which can contain usernames, server addresses or item names, are never saved or sent. Crash reports stay on your device, protected by Windows, until you send or delete them.
• One copy runningOpening Vaulted a second time hands over to the window that's already open, so only one process holds your encrypted cache.

• Each Windows release is signed with SHA-256 Authenticode and an RFC 3161 timestamp. The release script verifies every signature and refuses to sign when a release check fails.
• Updates come through Windows App Installer from an HTTPS feed. Windows installs only newer versions from the same signed publisher, so an older build can't be pushed to you.
• The app never downloads or installs code by itself.

• No cookies, analytics or tracking. Fonts and images are served from this site, and its security policy stops your browser from contacting anyone else.
• If you register interest, we keep your email address, the platforms you chose, your language, the date and when you confirmed it. The list doesn't record your IP address, your browser or where you came from, and an address is deleted once we've emailed it about every platform it chose.
• We email you once to confirm your address, then only to tell you when Vaulted is ready for the platforms you chose. Every email has a link to leave the list, and we never share or sell your address.
• Our emails go through Resend, an email delivery service, which receives each address and message only to deliver them. We don't track opens or clicks.
• Like most sites, our web server keeps access logs, which include IP addresses, to protect against abuse.
• Questions about your data? Email [email protected].

Found a vulnerability? Email [email protected]. Please leave out real vault data, and give us a fair chance to fix the problem before sharing details publicly. Other bugs go to [email protected].

Vaulted is an independent client. It is not affiliated with or endorsed by Bitwarden, Inc. Bitwarden is a trademark of Bitwarden, Inc.