Conventional password manager
- Create a provider account
- Create and remember a master password
- A permanent encrypted vault is maintained by the provider
- Devices synchronize through the vendor’s vault service
A fundamentally different secret vault
NO ACCOUNT. NO PASSWORD. NO BACKEND.
No MystSafe user account required. No memorized master password needed. No central vault held by MystSafe.
Free for individuals—at home or at work.MystSafe Private & Family stays free after beta.
Beta is coming soon
Your LaptopLocal encrypted vault
Your Cloud StorageSigned, encrypted updates
Your PhoneLocal encrypted vault
Only your devices can decrypt the vault
Your storage provider cannot read the vault
Your devices decide which updates are trusted
A different custody model
MystSafe is fundamentally different from conventional password managers and secret vaults.
Conventional password managers keep a permanent encrypted vault under the provider’s custody. MystSafe keeps the vault on your trusted devices and uses external storage only to move signed, encrypted updates.
MystSafe
- Create the vault on your device
- Unlock through local device authentication
- Pair another device with a short-lived QR code
- Move signed, encrypted updates through storage you choose
- Trusted devices verify and accept updates
This comparison describes the conventional centralized-vault model. Individual products may use different implementation details.
Your first local vault
Get Started in Seconds
No registration form. No MystSafe login. No master password to remember.
This initial local-vault flow is planned for the upcoming beta.
- 1
Open MystSafe
No registration.
No email address.
No MystSafe account.
- 2
Create Your Vault
Keys are generated locally.
Use Face ID, Touch ID, a device passcode, or macOS authentication.
- 3
Add Another Device
Scan a short-lived, single-use QR code.
The new device creates its own keys.
Existing-device private keys are never transferred.
- 4
You’re Ready
Encrypted updates synchronize across trusted devices.
Your devices verify what they receive.
Device-controlled architecture
NO MYSTSAFE BACKEND.
There is no MystSafe-operated sync backend. MystSafe connects directly to storage you choose.
GitHub is the MVP sync provider. It carries encrypted and signed synchronization data, but it does not hold the keys needed to unlock your MystSafe vault. Additional providers are planned.
- No MystSafe server
- No MystSafe cloud database
- No MystSafe vault custody
Mac local vault
Keys stay on device
Keys stay on device
GitHub
User-chosen storage
Cannot decrypt
User-chosen storage
Cannot decrypt
iPhone local vault
Keys stay on device
Keys stay on device
Hybrid post-quantum design
Beta architecture — coming soon
Quantum-Safe Cryptography
MystSafe combines standardized post-quantum algorithms with established classical cryptography, so confidentiality and authenticity do not depend on a single cryptographic family.
Explore the cryptographic architecturePost-quantum layerLattice-based protection
Classical layerEstablished cryptography
One authenticated envelopeEncrypted device-to-device update
Control stays with you
NO USER ACCOUNT. NO MASTER PASSWORD. NO CENTRAL VAULT.
No User Account
No MystSafe sign-up, username, email address, or permanent MystSafe identity is required for the free personal vault.
No Master Password
Vault access is authorized locally through a trusted device and its normal user-presence controls.
No Central Vault
MystSafe does not permanently hold your encrypted vault in a centralized vendor database.
Your storage provider moves encrypted updates. Your devices decide what is trusted.
MystSafe Private & Family
Free after beta. Free at home and at work.
Use MystSafe for personal, family, freelance, and individual professional work at no cost.
MystSafe Pro will add advanced capabilities, organization-level controls, and corporate support. Pro is an optional feature and support upgrade—not a requirement simply because you use MystSafe for work.
$0No trial. No subscription.
- Personal and family use
- Freelance and professional use
- Core local vault and device trust
- Free after the beta ends
Architecture transparency
Security should be understandable, not mysterious.
MystSafe explains where keys live, what storage providers can observe, and which checks every device performs before trusting an update.
Ready for a fundamentally different kind of password manager?
Private by design. Transparent by default. Controlled by your devices.