Zero-knowledge secret storage

A password vault we can't read — and secrets you can lock to a schedule

TimeLock encrypts your logins, notes, and files in your browser before they ever reach us. Mark any secret as openable only during defined windows — outside the window it is cryptographically un-openable, even by you.

14-day free trial. No credit card required · Cancel anytime

AES-256-GCM
Client-side encryption, per-item keys
Argon2id
Master password never leaves your browser
0
Plaintext secrets our servers can read
Signed
Browser extension as a hardened client
Features

Everything encrypted. Some things scheduled.

A full password manager underneath, with one signature trick no ordinary vault has: time.

Zero-knowledge encryption

Every login, note, file — including names and metadata — is encrypted in your browser before upload. A full database dump, a stolen backup, or a curious admin gets ciphertext and nothing else.

Time-locked scheduled access

Open a secret daily at 9, weekdays only, certain days of the month, inside a date range, or on a cron rule. Outside the window, not even your own client can decrypt it — with a live countdown to the next opening.

Encrypted files

Store documents, recovery sheets, and scans alongside your logins. Files are encrypted client-side before upload — the server stores opaque bytes it can't name, preview, or open.

Sharing & org vaults

Share an item by sealing its key to the recipient's public key — the server never sees a decryption key. Teams get seats and loudly-audited break-glass requests, with org vaults and Owner/Member/Viewer roles coming soon.

Passkeys & layered login

Passwordless email-code sign-in, optional TOTP or passkey (WebAuthn) 2FA, and then a separate master-password unlock on top. Auto-lock, clipboard auto-clear, and a built-in password generator.

Audit log & Recovery Kit

An append-only log of every unlock, grant, deny, share, and schedule change — metadata only, never plaintext. A mandatory Recovery Kit is your way back from a forgotten master password.

How it works

From sign-up to a time-locked secret in minutes

All the cryptography happens in your browser — the server only ever stores what it cannot read.

1

Create your vault

Sign in with an emailed one-time code, then set a master password. Argon2id runs in your browser to derive your keys — the password itself is never sent. You print or save your Recovery Kit.

2

Add your secrets

Logins, secure notes, TOTP seeds, and files are each encrypted under their own key before upload. Search, folders, and favorites all work client-side, over data only you can decrypt.

3

Lock some to a schedule

Pick a window — daily, weekly, monthly, a date range, or a cron rule. Outside it, a server-held wrap layer keeps the item sealed, and the vault shows a countdown to the next opening.

Honesty is the marketing

We publish our threat model — limits included

A security product must not lie. We state plainly what our zero-knowledge design defeats, what it can't, and what we do about the gap — including the signed browser extension for maximum assurance.

Pricing

Simple, transparent plans

Every plan starts with a 14-day free trial, billed yearly.

Solo
$15/yr
For your own passwords, notes, and files.
  • Unlimited logins & secure notes
  • 100 MB encrypted file storage (files up to 25 MB)
  • Time-lock up to 5 items
  • Audit log — 30-day retention
  • TOTP 2FA + in-vault TOTP codes
  • Sharing to other users
  • Org vaults, roles & seats
  • Break-glass access requests
  • Passkey (WebAuthn) 2FA
  • API access
  • Escrow recovery (opt-in, disclosed)
Team
$60/user/yr
For teams — org vaults, roles, and seats.
  • Unlimited logins & secure notes
  • 10 GB encrypted file storage (files up to 100 MB)
  • Unlimited time-locked items
  • Audit log — 1-year retention
  • TOTP 2FA + in-vault TOTP codes
  • Sharing to other users
  • Org vaults, roles & seats
  • Break-glass access requests
  • Passkey (WebAuthn) 2FA
  • API access
  • Escrow recovery (opt-in, disclosed)

Prices in USD, billed yearly. Full pricing details →

Ready for a vault that can't be read — even by us?

Start a free trial today. Your master password never leaves your browser, and any secret can be locked to a schedule.