Passwords only you can unlock.
Bazinet Vault encrypts everything on your own device with a key derived from your master password. We store only ciphertext — your passwords, notes, and master password never reach our servers.
Prefer a native app? Download for Mac →
- GGoogledavid@gmail.com••••••••••
- ⌗GitHub@bazinet-dev••••••••••
- NNetflixd.bazinet@gmail.com••••••••••
- AAmazonshopping@bazinet.net••••••••••
A real vault, minus the things that watch you
All the essentials of a modern password manager — built so that the secrets stay secret, even from us.
Zero-knowledge
Your vault is encrypted on your device. We literally cannot read it — not your logins, not your notes.
AES-256 encryption
Every entry is sealed with AES-256-GCM — the same authenticated-encryption standard used across the security industry.
Password generator
Create strong, unique passwords with one click — try our free generator, no account needed.
Breach check
See if a password has appeared in a known data breach — privately, using k-anonymity.
Auto-lock
Your vault locks itself after inactivity, so a walked-away screen stays a closed door.
Works everywhere
A fast web app on any modern browser — your encrypted vault syncs across your devices.
Import & export
Bring in passwords from a JSON export, or take an encrypted backup of your vault any time. Your data is never locked in.
Verified, bot-proof sign-up
Mandatory email verification plus Cloudflare Turnstile and rate limiting keep automated abuse and fake accounts out.
Security that gets out of your way
Good security shouldn't feel like a second job. Save a login once, and it's there the next time you need it — on your laptop, your phone, wherever you are. The hard cryptography happens quietly in the background.
- One master password unlocks everything
- Strong, unique passwords generated in a click
- Search, favorites, and notes built in
Your secrets never leave your device unencrypted
When you sign in, your master password is stretched with Argon2id into a key that never leaves your browser. That key wraps a random vault key, and that vault key encrypts every entry. The server only ever receives sealed, unreadable blobs.
- Master password is never transmitted or stored
- Server stores ciphertext only — a breach reveals nothing usable
- Changing your password re-wraps the vault, never re-exposes it
Three steps to a safer digital life
1 · Create your account
Pick a strong master password and verify your email. Setup takes under a minute.
2 · Add your logins
Generate fresh passwords or import what you have. Everything is encrypted before it's saved.
3 · Relax
Unlock with one password. Your vault is always encrypted, always yours, and only you hold the key.
Bazinet Vault vs. the usual habits
How a zero-knowledge vault compares to the two most common ways people manage passwords today.
| Feature | Reusing passwords | Browser-saved | Bazinet Vault |
|---|---|---|---|
| Unique password per site | ✕ | Sometimes | ✓ |
| End-to-end (zero-knowledge) encryption | ✕ | ✕ | ✓ |
| Argon2id master-key hardening | ✕ | ✕ | ✓ |
| Built-in strong generator | ✕ | Basic | ✓ |
| Breach checking | ✕ | Varies | ✓ |
| Provider can read your data | — | Often | Never |
| Price | Free | Free | Free |
Honest about what it is
A password manager you can actually reason about — including where it draws the line.
Independent, not enterprise
Built and run by one developer — no investors, no data to sell, and no roadmap set by anyone but the people using it.
Zero-knowledge by design
Your key is derived in the browser; only ciphertext ever reaches the server. The crypto and its trade-offs are written up plainly on the blog.
Clear about the trade-offs
Forget your master password and the data is gone — the cost of a design where no one else can read it. We'll always tell you what it is and isn't.
Industry-leading security, in plain terms
- Your master password is hardened with Argon2id — a modern, memory-hard algorithm built to resist password cracking
- Your vault is sealed with AES-256-GCM, the encryption standard trusted by banks and governments
- Zero-knowledge by design: we only ever store scrambled data that we cannot read
- Your master password and encryption keys never leave your device
- Built-in defense against bots, brute-force attempts, and automated attacks
- Hardened against common web attacks with a strict Content-Security-Policy and tamper protection
- Mandatory email verification and trusted sign-up keep accounts clean
Frequently asked
What does "zero-knowledge" actually mean?
It means the encryption and decryption of your vault happen on your device, not on our servers. We receive and store only encrypted blobs. Because your master password and keys never leave your browser, we have no technical way to read your data — even if we wanted to, or were compelled to.
What happens if I forget my master password?
Your data is encrypted with a key derived from that password, and there is no recovery backdoor by design. If you forget it, your vault cannot be decrypted. Choose a long passphrase you can remember, and consider writing it down somewhere physically safe.
Is Bazinet Vault really free?
Yes. It runs on Cloudflare's free tier and is supported by unobtrusive ads on these public pages (never on your vault). No credit card, no trial, no upsell.
Should I store my most critical secrets here?
For everyday logins, yes — your vault is end-to-end encrypted and only you hold the key. Two honest caveats, though: Bazinet Vault is an independent project that hasn't yet had a formal third-party security audit, and there's no password-recovery backdoor (forget your master password and the data can't be recovered). So for irreplaceable, high-stakes secrets, also keep a separate backup and don't rely on any single tool. See our Terms for the full details.
How is the breach check private?
We use k-anonymity: your browser hashes the password with SHA-1 and sends only the first five characters of that hash to look up matches. The full password and full hash never leave your device.
Your passwords deserve better than a sticky note.
Create your free, zero-knowledge vault in under a minute. Only you hold the key.
Contact
Questions, feedback, or a security report? Reach us at support@bazinet.net.