Fill in one click
Click the GrailVault key in a password box and choose a login. It fills only on the website the login was saved for, and never by itself.
End-to-end encrypted · 14-day free trial
Your passwords, saved and filled in for you.
Only you can read them.
GrailVault fills your logins in one click, offers to save new ones as you sign in, and brings in the passwords your browser already has. Everything is encrypted on your device before it is stored, so even we cannot read it.
- No card needed for the 14-day trial
- Works for everyone: simple for everyday use, with extras for developers
- No ads, no analytics, no trackers
- Browser extension with autofill
- Argon2id key derivation
- XChaCha20-Poly1305 encryption
- Authenticator-app two-factor
- Windows Hello and phone unlock
Features
Everything a password manager should do. Nothing you have to figure out.
The basics done properly, in an app that is easy to start with.
Saves as you sign in
Sign up or sign in anywhere and GrailVault offers to save the login, or to update it when you change your password.
Switch in minutes
Import from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password or LastPass. You see a preview first, and duplicates are skipped.
Encrypted before it leaves your browser
Names, usernames, notes and secrets are all encrypted on your device. We cannot read your vault, and neither can anyone who steals our database.
A security check that respects your privacy
Find weak, reused and leaked passwords. The check runs on your device, and the breach lookup never reveals a password.
Unlock the way you like
Use your master password, or unlock with Windows Hello. On phones and Apple devices, use the built-in lock where your browser supports it.
A way back in
Forget your master password and your data is still safe: the one-time recovery key sets a new one without losing anything. Add an authenticator app for two-factor sign-in.
Know what happened
See every signed-in device and sign any out. A recent-activity list shows sign-ins and wrong-password attempts, so you can spot anything unfamiliar.
Developers welcome
API keys, tokens, SSH keys, databases and cloud credentials have their own item types, tucked away until you need them.
Browser extension
Sign in without typing. Save without thinking.
The extension works where you do: on the sign-in page itself. It is careful by design, so the convenience does not cost you safety.
- Fills a login only on the site it belongs to, so look-alike phishing sites get nothing
- Only fills when you click, and never on pages without https
- Suggests a strong password on sign-up forms
- Keeps its keys in memory only, gone when you close the browser
How it works
Zero-knowledge, in plain language
Your master password never leaves your device. Everything we store is scrambled with a key only you can rebuild.
-
You choose a master password
It never leaves your browser and is never stored anywhere.
-
Your browser makes the keys
A slow, memory-hard function (Argon2id) turns your password into keys. A random vault key encrypts every item.
-
We store ciphertext
We keep scrambled data we cannot unscramble. Sign in on any device and your browser decrypts it locally.
What we store
- Encrypted items (ciphertext)
- Your email address
- Public keys and a hash of a login key
- Sizes and timestamps of your items, and your activity log
What we never see
- Your master password
- Your vault key
- Item names, usernames and notes
- Passwords, API keys and other secrets
Switching
Bring your passwords with you
Export a file from your browser or password manager, choose it in GrailVault, check the preview and import. The file is read on your device and encrypted before anything is sent.
- Chrome, Edge, Firefox, Safari, Bitwarden, 1Password and LastPass
- Duplicates are skipped, so you can safely import again
- Leave any time: export an encrypted backup or a CSV file
Designed to be used
Clear, fast and good-looking in light and dark
A clean interface that gets out of your way. Secrets are hidden until you reveal them, hide again by themselves, and your clipboard is cleared after you copy.
- Secrets are masked by default and re-hide after 15 seconds
- Copied secrets are cleared from the clipboard after 30 seconds
- Keys stay in memory only and are wiped the moment you lock or close the tab
- Runs in your browser, with a layout that adapts to phones
Unlock your way
Face, fingerprint or phone lock, instead of typing a long password
On Windows, unlock with Windows Hello. On your phone, use the screen lock you already have. The unlock secret stays inside your device and is never sent to us, so your vault is no less private.
- Windows Hello, plus phone and Apple device locks where supported
- Your master password and recovery key always still work
- Remove a lost device from your settings in one click
Pricing
One plan. Everything included.
Try everything free for 14 days. Then pay monthly, or pay yearly and save 10%.
Monthly
₹69per month
Billed every month. Cancel any time.
- Every feature, no tiers
- Logins, cards, identities, notes and developer keys, with tags, favorites and trash
- Windows Hello unlock, plus phone and Apple device locks where supported
- Authenticator-app two-factor sign-in
- Recovery key and encrypted backups
- See and sign out your devices
Save 10%
Yearly
₹745.20per year
That is ₹62.10 a month instead of ₹69. You save ₹82.80 compared with twelve monthly payments (₹828).
- Everything in Monthly
- 10% off, billed once a year
- One payment to remember instead of twelve
Every account starts with a 14-day free trial, with no card needed. Per account. Prices are in Indian rupees (INR); taxes may apply where required. If you do not choose a plan after the trial, your vault becomes read-only: you can still view and export everything, and nothing is deleted.
Straight talk
What GrailVault is not (yet)
Security software should be honest about its limits. These are the things you might expect that are not here today.
No mobile app yet. It works in your phone's browser, with your phone's lock for unlocking. The extension runs in desktop browsers.
No Safari extension. The extension covers Chrome, Edge and Firefox.
No sharing or teams. Every vault is private to one account. GrailVault is for individuals.
No offline mode. You need an internet connection to open the vault.
Not independently audited. The design is documented so you can review it, but no third party has audited it.
FAQ
Questions, answered
Can you read my passwords?
No. Everything is encrypted in your browser with a key derived from your master password. We store only ciphertext, and there is no administrator role with access to anyone's vault.
What if I forget my master password?
Nobody can reset it for you, because nobody can read your data. That is why GrailVault gives you a one-time recovery key when you sign up. With it you can set a new master password and keep everything. Without the master password and the recovery key, the data cannot be recovered.
How does the free trial work?
You get 14 days with every feature, and no card is needed. If you do not choose a plan afterwards, your vault becomes read-only: you can still view, copy and export everything. Nothing is ever deleted because of a missed payment.
Can I bring my passwords from my browser?
Yes. Export them from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password or LastPass and import the file, with a preview first. See how to import.
Does it work on my phone?
Yes, in your phone's browser, and you can unlock it with your phone's lock. The autofill extension works in desktop browsers; a mobile app is something we want to build but it is not available yet.
How much does it cost?
₹69 per month, or ₹745.20 per year, which is 10% less than paying monthly. See pricing for the details.
Can I take my data with me?
Yes. Export an encrypted backup, or a CSV file for another program, whenever you like. You can also delete your account and all of its data from your settings.
Has it been security audited?
Not by an independent third party yet. It uses well-reviewed cryptography (libsodium, Argon2id, XChaCha20-Poly1305, WebAuthn) rather than home-made algorithms, and the design is written down in the security documentation so you can check it for yourself.
Keep your passwords where only you can read them.
Start your 14-day free trial. It takes a couple of minutes.