End-to-end encrypted

Seal your vault.

Three pieces, all generated here in your browser: a passphrase we generate for you (or one you write yourself), a twelve-word recovery phrase we hand to you, and the encryption keys that lock your genome behind them. We never see the passphrase, the recovery phrase, or the keys.

PBKDF2-SHA256, 600 000 rounds — enforced on the server.
AES-GCM, 96-bit nonce, per-account keys.
Ciphertext-only on our servers — we cannot read your vault.

Step 1 of 4

Seal your vault with a passphrase.

We generate one for you — copy or regenerate it now, then continue. Your passphrase never leaves this browser; the recovery phrase on the next screen is the only way to restore your vault if you forget it.