Vaarta Vault
Sign inCreate your vault
Apps

Your vault, where you work.

A Mac app, a Chrome extension and Vaarta Authenticator on your Android phone. Up to ten browsers and computers per person, each with its own key.

DesktopChromeAndroid
AppleGoogle ChromeAndroidWinLinuxModel Context Protocol

Desktop

The Mac app.

Find anything in a second, open your servers and keys, and lock the moment you step away.

Apple

Mac

Apple silicon. Device key in the Secure Enclave. Signed updates.

Download for Mac
WinWindows

Windows

Coming soon

64-bit. Device key in the TPM where there is one.

Linux

Linux

Coming soon

64-bit, AppImage and .deb. Device key in the Secret Service.

  1. Your app1Sign in onceOAuth with PKCE, in your browser.
  2. Your app2Registers its keyA P-256 key in the Secure Enclave.
  3. Phone3You match the numberThe Mac goes live.
  4. Your app4Signs every requestThe token is dropped; the key does the work.

Search and copy

Search every login, server, key and card. What you copy clears itself after 30 seconds and is marked concealed on macOS.

Servers and keys, ready

Addresses, ports, logins and SSH keys for every server you run, on one card.

Device-only items

Keep an item on this Mac alone, sealed with AES-256-GCM under a Keychain key.

Locks itself

On sleep, screen lock, idle (1, 2 or 5 minutes), closing the window or quitting. Touch ID to open, if you like.

A password generator

Strong passwords where you create them.

Signed self-updates

Updates come from downloads.identity.vaarta.ai and are signed.

Chrome extension

Fills the right form, on the right site, and nothing else.

Fill from “For this site”

Open the extension on a sign-in page and fill the username, password and current code with one click. Identities fill sign-up forms; cards fill only a form the page shows as a checkout.

Exact-site matching

https only, and only on a host the login declares. Hosts are compared in their canonical form, so a look-alike domain never matches.

Never a hidden field or a frame

Fields that are hidden, zero-size, disabled or read-only are skipped. Only the top frame of the page is ever filled.

Strong-password suggestion

On a new-password field, the extension offers a strong password.

Offer to save

When you sign in somewhere new, the extension can offer to save the login. It is off until you turn it on and grant the permission.

Locks and clears

Locks on screen lock, idle or closing the popup; clears the clipboard after 30 seconds. Every request is signed by the extension's own key.

Android

Vaarta Authenticator. Your key.

The phone that approves every unlock, every card and every agent grant. It keeps its key in the phone's hardware and asks for your fingerprint or face on every approval.

  • Number-matching approvals, with “It wasn't me”
  • Your one-time codes
  • Your vault on the phone, with a fresh approval for every card
  • Android 11 and later
Vaarta Authenticator

Show a password?

Production database, on MacBook Pro

176083
It wasn't me

In which planEvery app in every plan, with up to 10 browsers and computers per person.See plans →

See plans

Put every secret behind one tap.

Create your vault, link your phone, and bring everything in from where it lives today.

Create your vaultSee plans