HexVault

HexVault is a zero-knowledge password manager that encrypts your passwords on your device before they ever leave it. Unlike most password managers that encrypt on their servers, HexVault encrypts on yours — meaning even if our servers were breached, subpoenaed, or seized, your passwords remain safe.

How it works

When you log in, your master password never leaves your browser. It passes through Argon2id — a memory-hard algorithm that makes brute-force attacks 1,000× more expensive than the PBKDF2 used by most competitors. This produces an encryption key that stays only in your browser's memory. Every vault entry is encrypted independently using AES-256-GCM before being sent to our servers. We store ciphertext only — we have no ability to read your passwords.

Features

Autofill — detects login forms and fills your username and password with one click

Breach monitoring — checks your passwords against Have I Been Pwned using k-anonymity, so your actual passwords are never transmitted