What is PulsVault
PulsVault is a zero-knowledge password and secrets manager for individuals, families, teams, and businesses. Learn what it does, who it's for, and the principles behind it.
PulsVault is a zero-knowledge password and secrets manager. It stores your passwords, keys, documents, and other secrets in encrypted vaults, lets you share them safely with the people you trust, and gives organizations the controls they need to run secrets management at scale.
"Zero-knowledge" means encryption and decryption of your secrets happen on your device. PulsVault's servers hold every password and secret field only as ciphertext — we cannot read your secrets, and neither can anyone who compromises the server. Item names and non-secret fields are stored readable (what is and isn't encrypted).
What you can store#
A vault holds typed items — more than 20 built-in types, each with the right fields:
- Logins & credentials — usernames, passwords, TOTP seeds, recovery codes
- Financial — bank accounts, payment cards, insurance
- Identity — passports, driver's licenses, healthcare records
- Developer — SSH keys, API keys, database credentials
- Secure notes & files — rich-text notes and encrypted attachments
See Vaults, items & item types for the full catalog.
Who it's for#
Individuals & families
A private vault for yourself, plus shared vaults for the household — Wi-Fi, streaming, travel docs.
Teams & businesses
Shared team vaults, role-based access, policies, audit logs, and compliance reporting.
Core principles#
Your master password and Access Key derive the keys that encrypt your secrets. Those keys never leave your device. PulsVault stores your secrets only as encrypted blobs, your credentials only as verification hashes, and item names and non-secret fields readable (what is and isn't encrypted). Read how encryption works.
- You hold the keys. The Access Key is shown once and is unrecoverable by design — your Emergency Kit is how you keep it safe.
- Least privilege sharing. Share a whole vault or a single item at the exact access level you choose — never more.
- Defense in depth. Two-factor auth, trusted devices, a tamper-evident audit log, and abuse protection.