This page is designed to help you find out whether VaultKeepR is good and if it is the right choice for you.
VaultKeepR is a decentralized, zero-knowledge password manager that works without an account, an email, or a phone number. Your vault is encrypted on your device with XChaCha20-Poly1305 and Argon2id before anything leaves it, then stored on IPFS as content-addressed fragments. No server we operate can read your data, and no signup form exists.
Core features: - Zero-knowledge architecture: no server-side crypto primitive, commitment check on decrypt - No account, no email: your identity is a key pair (ERC-4337 Smart Account on Base, gasless) - IPFS distributed storage with optional encrypted cloud backup (Premium) - CRDT sync (Automerge): conflict-free multi-device sync, works offline, merges on reconnect - Shamir 3-of-5 recovery across five channels, no trusted third party - On-chain digital legacy: name up to 5 beneficiaries and set a dead man's switch - Built-in TOTP authenticator, password generator, breach monitoring (HIBP, k-anonymity) - Passkey unlock (WebAuthn), biometrics, physical NFC backup keys - 12+ import formats, plain / encrypted / PGP export, one-click import from Bitwarden, LastPass, Dashlane, 1Password, KeePass - Secure Share: encrypted links, notes and files; secure documents and photos (Premium) - Email aliases (Premium) - Anti-phishing protection against fake dApp domains, zero network calls from the extension
Everything security-related is free forever. Premium adds convenience: TOTP, email aliases, Shamir recovery, 1 GB encrypted cloud, secure documents (€2.49/month or €17.99/year). A lifetime licence unlocks it all permanently for €299, paid anonymously in cryptocurrency.
The SDK and the smart contracts are open source under MIT: github.com/VaultKeepR/vaultkeepr-public
Available on Chrome, iOS, and Android.
Listed in
Zero-knowledge encryption
Every password, card, and note is encrypted on your device with XChaCha20-Poly1305 and Argon2id key derivation before it ever leaves it.
Decentralized IPFS sync
Encrypted vault backups replicate across the IPFS network instead of a central database, with no single point of failure.
No email, no account
Create a vault with only a master password, fingerprint, or passkey. An ERC-4337 smart account is created automatically, no email or wallet setup required.
Cross-platform apps
Native apps for Chrome, Firefox, iOS, and Android that stay in sync and work offline, with changes merging on reconnect.
One-click import
Import directly from Bitwarden, 1Password, Dashlane, LastPass, CSV, or PGP files in minutes.
TOTP authenticator
Generate and copy two-factor codes stored alongside your credentials.
Shamir fragmented recovery
Your recovery key is split into 5 shares; any 3 rebuild access if a device is lost.
Email aliases
Generate aliases to hide your real inbox when signing up to services.
Breach and password health monitoring
Scan stored passwords for known breaches, reuse, and weakness with a per-entry health score.
Encrypted cloud storage
Store documents up to 25 MB in encrypted cloud storage (50 GB on Pro and above, unlimited on Ultimate).
If your threat model includes "what if the password manager itself gets breached", VaultKeepR is the answer: there is no central database to steal and no vendor with access to your plaintext. You also keep full freedom: import from Bitwarden, 1Password, Dashlane, LastPass, CSV, or PGP in minutes, run it on Chrome, Firefox, iOS, and Android, and export everything at any time. It is open source under MIT, so you are not betting on one company staying honest.
The company structurally cannot read your vault. Encryption keys are derived on your device and the encrypted vault syncs through IPFS, a decentralized network, instead of a company database. There is no signup: no email, no name, no tracking. Every other manager in this category asks you to trust the vendor; VaultKeepR is built so that trust is not required, and the open-source code makes that claim checkable.
Privacy-conscious individuals: developers, self-hosters, crypto holders, and anyone managing infrastructure or sensitive keys who cannot afford a leak. Also anyone who has read a password manager breach headline and started wondering what their vendor knows about them. If you want your credentials protected by mathematics and architecture rather than by a company's promises, you are the audience.
The founder paid for every major password manager and kept running into the same problem: an entire digital life sitting in one company's database, protected by promises. The alternative was to build a manager where the vendor is structurally unable to read the vault: keys derived on-device, ciphertext synced over IPFS, identity handled by an on-chain smart account, no email collected anywhere. VaultKeepR is that manager, open sourced so the claims hold up to inspection.
TypeScript, Next.js (web), React Native (mobile), and browser extension APIs (Chrome, Firefox). Cryptography: XChaCha20-Poly1305 encryption, Argon2id key derivation, HMAC-SHA256, and Shamir Secret Sharing from the audited @noble libraries. Sync over IPFS, identity through ERC-4337 smart accounts, and CRDT-based merging for offline changes.
We have collected here some useful links to help you find out if VaultKeepR is good.
Check the traffic stats of VaultKeepR on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of VaultKeepR on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of VaultKeepR's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of VaultKeepR on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about VaultKeepR on Reddit. This can help you find out how popualr the product is and what people think about it.
Try VaultKeepR to experience cross device sync without cloud dependencies. Your passwords stay yours. - Source: dev.to / 2 months ago
Try VaultKeepR free and see how proper family password management should work. Your family's digital security depends on the choices you make today. - Source: dev.to / 2 months ago
Do you know an article comparing VaultKeepR to other products?
Suggest a link to a post with product alternatives.
Is VaultKeepR good? This is an informative page that will help you find out. Moreover, you can review and discuss VaultKeepR here. The primary details have been verified within the last quarter. So they could be considered up to date. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.
