Zero-Knowledge
by Design.
Even if our servers were fully compromised, your data remains encrypted ciphertext. We simply do not have the keys to your vault.
Local Device
Master Password + Access Key are hashed locally
PulsVault Servers
We only store and sync the encrypted ciphertext
Military-Grade Security
Audited, open, and unbreakable
Our security model isn't based on keeping our methods secret. It's based on rigorous mathematics and modern cryptographic primitives.
Zero-Knowledge Architecture
Your Master Password never leaves your device. It is hashed, salted, and stretched locally to generate the encryption keys. We literally cannot see your data, even if we wanted to.
AES-256-GCM + ChaCha20
Choose your weapon. PulsVault supports both AES-256-GCM and XChaCha20-Poly1305. We use authenticated encryption so any tampering with the ciphertext is immediately detected and rejected.
Device Local Key Wrapping
Your Access Key acts as a second, machine-generated factor for your encryption. Your final encryption key is derived from both your Master Password AND the 128-bit Access Key stored locally on your device.
4-Factor Authentication Options
Go beyond 2FA. Layer your security with Master Passwords, Access Keys, TOTP authenticators, and Hardware Security Keys (YubiKey / WebAuthn).
Your data, your keys.
Experience zero-knowledge security without sacrificing usability.
Start Free Trial