Lifekees

End-to-end encrypted password manager

Your passwords, sealed
before they ever leave.

Lifekees encrypts your vault on your device with a key our servers never see — and cannot see. Not when you sign in, not when you sync, not if someone walks off with the database.

Free while it is in rebuild. No card, no tracking, no analytics on this page.

What that actually means

Argon2id, 256 MB

Your master password is stretched with Argon2id at 256 MB of memory and four passes — four times the memory cost most password managers default to. Guessing it means renting a great deal of RAM for a very long time.

A key we never receive

Every account gets a 125-bit Secret Key, generated on your device and never transmitted. It is mixed into your keys before anything is derived, so a stolen database is not crackable — not slowly, not at all.

Two ciphers, not one

Your vault is sealed with XChaCha20-Poly1305 and then again with AES-256-GCM, each under its own key. An attacker has to break both. It costs microseconds.

Quantum-safe by construction

The vault is protected by symmetric cryptography alone, which Shor’s algorithm does not touch. Ciphertext harvested today stays sealed. The public-key material for sharing is hybrid: X25519 and Ed25519 alongside NIST’s ML-KEM-1024 and ML-DSA-65.

Passkeys that actually decrypt

Touch ID, Face ID and Windows Hello do not just sign you in here. The same prompt produces the key that opens your vault, on your device. Enrolled per device, revocable from settings.

Works with no signal

Install it and your vault opens on a plane, in a basement, on hotel wifi that wants money. Edits made offline are queued and sync when you are back — merged, not overwritten.

Put it on your phone

Lifekees is a web app that installs like a native one — same code, no app store, no review queue between a security fix and you. It gets a home-screen icon, opens without browser chrome, and works offline.

iPhone & iPad

  1. Open vault.lifekees.com in Safari.
  2. Tap the Share button.
  3. Choose Add to Home Screen.

Android

  1. Open vault.lifekees.com in Chrome.
  2. Tap the ⋮ menu.
  3. Choose Install app.

Desktop

  1. Open vault.lifekees.com in Chrome or Edge.
  2. Click the install icon in the address bar.
  3. Safari: File → Add to Dock.

And what it does not mean

  • We cannot recover your account. No password reset, no support ticket that gets you back in. Lose both your master password and your Secret Key and the vault stays sealed — that is the same property that makes a database breach worthless.
  • Your device is still your device. Encryption at rest and in transit does not help against malware watching you type. Nothing can, and anyone claiming otherwise is selling something.
  • The format is documented and the code is auditable. The scheme is written down so it can be argued with, not just trusted.