Passwords · codes · passkeys · secrets

Keep every credential you hold in one encrypted vault.

Sphragis keeps your passwords, one-time codes, passkeys and application secrets in one encrypted vault. Your devices hold the keys. Our servers store ciphertext.

Create your vaultRead the security design
Free plan available.
app.sphragis.siliconblast.com
GGitHubada@example.com
BBank loginada.l
WHome Wi-FiWireless router
{ }payments-api12 secrets · prod
GitHub
password••••••••••••••••
482 91319s
Passkey saved
Four jobs in one vault

Stop spreading your keys across four apps.

Vault

Store passwords, passkeys, cards, IDs and documents. Share a vault with your family or your team and revoke access in one step.

Authenticator

Generate two-factor codes offline. Keep them on one phone, or sync them encrypted so a lost phone never locks you out.

Autofill

Save sign-ins as you browse and fill them on every device. Sphragis checks the domain before each fill to stop phishing pages.

Secrets

Give your applications database URLs and API keys at runtime. Versions, access rules, rotation and an audit trail come built in.

Zero knowledge

We never see your vault. We built Sphragis so we never could.

Your master password and a 128-bit Secret Key together create the key to your vault. The Secret Key lives on your devices and in your Emergency Kit. A stolen database gives an attacker nothing to guess against.

Read the security white paper
  1. 1Your device encryptsEvery item gets its own key before it leaves your phone or browser.
  2. 2Our servers store ciphertextTitles, URLs, usernames and codes stay encrypted at rest and in transit.
  3. 3Only your devices decryptPeople you share with get their own sealed copy of the vault key.
For developers

Delete your .env files.

Run your app with secrets injected at start. Read one secret by its reference. Let CI sign in with OIDC and no stored token.

See the developer docs
$ sphragis login
✓ Signed in as ada@example.com

$ sphragis run --project payments-api --env prod -- npm start
  Injected 12 secrets

$ sphragis read sphragis://payments-api/prod/DATABASE_URL
  postgres://payments@db.internal:5432/payments
Everywhere you sign in

Sphragis runs on your phone, in your browser and in your terminal.

iPhone and iPadWith Apple Watch codesAndroidWith Wear OS tilesMac, Windows, LinuxDesktop appBrowser extensionChrome, Edge, Firefox, SafariCommand linemacOS, Linux, Windows

Create your vault and import the passwords you already have.

Import from your browser or your current password manager on the first screen.