The usual way
- Your secrets may sit readable on someone else's server
- You trust a provider to guard them for you
- A breach of their database can expose your accounts
- One central place holds the keys to everything
Password Manager · Desktop · Web · Mobile · ExtensionFree
Your passwords, encrypted on your device — and only yours to unlock.
Zentlock is a zero-knowledge vault for logins, cards, identities, notes, SSH keys and 2FA codes. Everything is encrypted on your device before it is stored or synced, so without your master passphrase, no one — not even us — can read it. Share collections end-to-end, and sync through your own Google Drive.
- Zero-knowledge
- AES-256-GCM encryption
- Offline-first
- End-to-end sharing
Works on
WindowsmacOSLinuxWebBrowser extensioniOS & Android
The difference
Most vaults ask you to trust a server. Zentlock asks you to trust only yourself.
With Zentlock
- Encrypted on your device before anything is stored
- Only your master passphrase can unlock it
- An exposed database is just unreadable ciphertext
- You hold the only keys, on your own devices
How it's protected
One passphrase you remember, layers of encryption you don't have to think about
Zentlock builds a chain of keys from your master passphrase down to each item. Every layer is encrypted, nothing readable is ever stored, and the keys live only in memory on your device after you unlock.
Your master passphrase
The one secret you remember. It is never sent anywhere and never stored — Zentlock cannot see it or reset it.
Master key
Derived from your passphrase with the memory-hard Argon2id algorithm and a unique salt, so guessing is slow and expensive.
Vault key
A strong random key that protects everything, kept wrapped by your master key and unlocked only in memory on your device.
Your encrypted items
Each collection has its own key and every item is encrypted, so a single share or revoke never exposes the rest of your vault.
See it work
From your passphrase to a vault only you can open
Watch how a secret moves through Zentlock — encrypted on your device, synced as ciphertext, unlocked anywhere, and shared end-to-end. Let it play, or step through it yourself.
01
Create your vault
Pick a master passphrase. It never leaves your device and is never stored — it's the one secret only you know.
What's inside
Everything you need to keep secrets safe
Zentlock is a full password manager — store and organize every kind of credential, generate strong passwords, keep your 2FA codes, and share safely with the people you trust.
Everything in one vault
Keep every kind of secret together, neatly typed.
- Logins with username, password, website and 2FA
- Payment cards, identities and secure notes
- SSH keys with public/private key and fingerprint
- Custom fields (text, hidden, URL) and tags on any item
Stay organized
Find and tidy items the way you think.
- Group items into collections with colors
- Favorites for the things you use most
- Archive and Trash with restore
- Instant search across names, sites, tags and notes
Unlock your way
Fast on trusted devices, strict when it matters.
- Master passphrase, 4–8 digit PIN, or biometrics
- PIN and biometrics are a gate, never the encryption key
- Configurable auto-lock on idle, background or restart
- Optional one-time recovery key to prevent lockout
Share without exposing
Give the right people access, end-to-end encrypted.
- Share a whole collection by email
- Choose read-only or read & write per person
- Invite someone new with a one-time code
- Revoke anytime — keys rotate so they lose future access
Tools you'll use daily
Stronger passwords and your 2FA codes, built in.
- Password generator with length and character options
- Memorable passphrase generator
- Live password-strength meter
- Built-in authenticator for all your TOTP codes
Sync & portability
Your data, on every device and always yours.
- Offline-first — fully usable with no network
- Optional sync through your own Google Drive
- Use the same vault across all your devices
- Import from other managers; export plain or encrypted JSON
Everywhere you are
One vault, all your devices
Zentlock runs natively on your computer, in the browser, as an extension that fills logins for you, and on your phone — all sharing the same encrypted vault, synced through your own Google Drive.
Desktop app
A native app for your computer, with secure unlock built in.
- Windows
- macOS
- Linux
- Unlock with passphrase, PIN or biometrics
Web
Open your vault in any modern browser, nothing to install.
- Chrome, Edge, Firefox, Brave, Safari
- Same encrypted vault
- Great for a quick check
Browser extension
Fill logins where you actually use them.
- Detects login forms
- Fills username, password and 2FA codes
- Offers to save new logins
Mobile
Your vault in your pocket, with quick unlock.
- iOS & Android
- Fingerprint / Face unlock
- Scan 2FA QR codes with the camera
Look & feel
A vault that's a pleasure to use
Private by design
Your secrets never leave in the clear
Zentlock is zero-knowledge from the ground up. Your data is encrypted on your device, the keys are yours alone, and an exposed database — including your Drive copy — reveals only unreadable ciphertext. You can export everything or wipe a device whenever you like.
- Encrypted on your device. Every item is sealed with AES-256-GCM before it is ever stored or synced.
- Only your passphrase unlocks it. Keys are derived with Argon2id and live in memory only — never written down, never sent anywhere.
- Nothing readable on a server. The copy in your Google Drive holds ciphertext only; Google and we see nothing usable.
- You can walk away anytime. Export your vault as encrypted JSON, or de-enroll a device to erase its local copy — your data is always yours.
Loved by careful people
Trusted with what matters
“Finally a password manager where I genuinely hold the keys. Everything is encrypted on my machine, it syncs through my own Drive, and sharing a collection with my partner took seconds.”
“Zero-knowledge, AES-256, Argon2id, end-to-end sharing with key rotation on revoke — it ticks every box I care about, and it's free and open source. The built-in authenticator means I dropped a second app.”
“I keep the family's logins in one shared collection and the kids get read-only access. The recovery key saved me once already. It just feels safe and simple.”
“We use it across the team for shared service credentials. Per-collection sharing, instant revoke, and nothing readable ever touches a server — it sailed through our review.”
FAQ
Frequently asked questions
Is Zentlock really free?
Yes. Zentlock is completely free and open source under the MIT license, for both personal and everyday work use. There is no subscription and no paid tier.
Can anyone — including you — read my passwords?
No. Zentlock is zero-knowledge. Your data is encrypted on your device with AES-256-GCM, and the keys are derived from your master passphrase, which never leaves your device. Even if someone obtained the stored database — including the copy in your Google Drive — they would see only unreadable ciphertext.
Where is my data stored?
Your encrypted vault lives on your own device, and you can optionally sync it to your own Google Drive so it is available on every device. Only encrypted data is ever stored or synced — no readable passwords or keys are kept on any server.
What happens if I forget my master passphrase?
At setup Zentlock can generate a one-time recovery key that restores access if you forget your passphrase. Keep it somewhere safe. Without the passphrase or the recovery key, the vault cannot be decrypted — which is exactly what keeps it private.
Which platforms does Zentlock support?
Zentlock runs as a desktop app on Windows, macOS and Linux, in modern web browsers, as a browser extension that can autofill logins, and on mobile — all sharing one vault. It works offline and syncs your encrypted vault when you are online.
Can Zentlock handle two-factor (2FA) codes?
Yes. Zentlock has a built-in authenticator that generates time-based one-time codes. You can add codes by pasting an otpauth link or a secret (or scanning a QR code on devices with a camera), keep them standalone, or attach them to a login. It can fully replace a separate authenticator app.
Can I share passwords with my family or team?
Yes. You can share a whole collection with someone by email, choosing read-only or read & write access. Sharing is end-to-end encrypted, so only the recipient can decrypt it, and you can revoke access at any time — after which they can no longer see future changes.
Can I import my passwords from another manager?
Yes. Zentlock imports JSON files, mapping entries to logins, cards, identities and notes. You can also export your vault as plain or encrypted JSON for backups or to move it elsewhere — your data is always yours to take with you.
How strong is the encryption?
Zentlock uses AES-256-GCM authenticated encryption for your data and the memory-hard Argon2id algorithm to derive keys from your passphrase, with public-key encryption for sharing. These are widely trusted, industry-standard algorithms, strong enough for organization-level use.
Does Zentlock work offline?
Yes. Zentlock is offline-first — your vault is fully usable with no internet connection. When you reconnect, your encrypted changes sync in the background to your own Google Drive if you have it connected.
Take back control of your passwords.
Create a vault in a minute, on the device you already use. It's free, your data stays encrypted on your side, and you can take it with you anytime.