guardedYour secrets stay yours.

SELF-HOSTED · ZERO KNOWLEDGE

The quiet place
for your secrets.

Your vault is encrypted in this browser before it reaches your server. Guarded never receives your master password or readable credentials.

01

Client-side encryption
The keys live with you.

02

Built for self-hosting
One binary. Your hardware.

WELCOME

Sign in to guarded

Access your encrypted wallet.

Your account password authenticates you. Your separate master password decrypts your vault only on this device.

VAULT LOCKED

Unlock on this device

Your master password is used locally and never sent to the server.

ENCRYPTED CONTAINER

Add to your vault

FieldsEverything below is encrypted locally.

Passkey references store metadata only. Private passkey keys remain in your authenticator.

ZERO-KNOWLEDGE SHARE

Share an encrypted item

The item is re-encrypted in this browser for the recipient. Guarded stores only the access grant and sealed envelope.

ACCOUNT SECURITY

Security

TWO-STEP VERIFICATION

Enter authenticator code

Open your authenticator app and enter the current six-digit code.