One key instead of accounts
Secret Keeper creates a key on your device and asks for nothing else: no server, no registration.
With this key you encrypt messages, keep passwords and cards, confirm sign-ins to websites and get two-factor codes.
GitHub alice 483 920 21 
Google alice@example.com 117 046 9 
Dropbox alice 902 318 4 
Amazon alice@example.com 576 201 27 What one key can do
Messaging in envelopes
Messages and files are encrypted on your device and travel through any messenger. Only the recipient can read them.
Learn moreVault
Passwords, cards, documents, notes and files behind a PIN or biometrics. Everything stays only with you.
Learn moreTwo-factor codes
Scan the service’s QR code and one-time codes live in the Vault next to the password. No separate app.
Learn morePasskeys
Sign in to websites without a password: Secret Keeper works as a passkey store and is restored from the same 12 words.
Learn moreSign in to websites by QR
The site shows a QR code, you confirm the sign-in in the app. No password is typed, nothing leaks.
Learn moreData on request
A site asks for a card or a delivery address, you pick a Vault record and send it encrypted. Nothing is retyped.
Learn moreHow to get started
1. Install Secret Keeper
It works without servers or accounts: instead of an account, a key created on your device; its public part is your address for messaging.
2. Create a key and save the 12 words
The seed phrase is the only backup: it restores your messaging, the Vault and your passkeys. Write it down and keep it away from the phone.
3. Choose where to begin
Everything runs off the same key, so start with whatever you need first:
Why Secret Keeper
No servers, no accounts
Your address is your public key - sk1…, about 60 characters. No registration, no phone number, nothing stored in a cloud. The whole identity is restored from 12 BIP-39 words.
A self-contained envelope
X25519 key agreement plus XChaCha20-Poly1305. Every envelope carries a key slot for each recipient - and for you, so your own history stays readable. Deliver it over any channel.
Files of any size
Files are encrypted into the .skf container in streaming chunks: a movie encrypts as easily as a note, and truncation or chunk reordering is detected.
Everything stays local
Contacts and history live only on your device. Backup is a single encrypted .skb archive that only your key opens.
If the phone ends up in the wrong hands
The vault is locked with a PIN or biometrics. The rest is designed for pressure, not just for loss.
Wipe on brute force
A configurable number of wrong PIN attempts erases the vault.
Duress PIN
A second PIN that opens an empty profile - or silently wipes the real one.
Clipboard hygiene
Copied secrets are cleared from the clipboard after a timeout.