wolpass
Sign inStart with wolpass
PASSWORDS · CODES · KEYS

Only a key or a password of yours opens it.

wolpass seals your passwords, one-time codes and keys to a YubiKey you carry. We keep the sealed copies in the EU, and we cannot open them.

Start with wolpassSee the plans
Android · Linux · Firefox · ChromeStored in the EU
bank3 of 286Esc
personal/bankOTPEnter
personal/bank-card
finance/bank
OPENpersonal/bankreseals in 0:42
3
ONE-TIME CODE
318 604
Opened with one touch of the key.

Sealed where you are. Kept where the law is strict.

01 · SEALED ON YOUR DEVICE
Each entry is sealed before it leaves the phone or laptop.
Opening one takes a key (its PIN once, and a touch) or a password. Then it reseals by itself.
02 · KEPT IN THE EU
The sealed copies sync through our servers in the EU.
We hold ciphertext and the time it changed. That stays true wherever you live.
03 · SHARED BY KEY
A shared entry is sealed to each member's key.
Someone joins: it is resealed for them. Someone leaves: it is resealed without them.

Wherever you sign in.

Get the apps
PHONE · ANDROID
Tap the key to the back.
NFC opens an entry. Autofill fills the app you are in.
LAPTOP · LINUX
SuperP from anywhere.
The overlay finds the entry, the key stays in its port.
BROWSER · FIREFOX, CHROME
Fills the page you are on.
It asks the app on the laptop. Keys never sit in the browser.
WHAT WE HOLD

If we are asked, this is all there is to hand over.

The list on the right is the whole of it. It is the same list we publish in our transparency report.

Where it lives, and under which law
WE CAN SEE
Your email address
Your workspaces and who is in them
When a store changed, and its size
The names of entries, for now
Which device synced
The public half of your keys
WE CANNOT
Passwords
One-time codes
Notes, logins, every field
Your PIN
The private half of your keys
ana@saltmarsh.studio1 account
YOURS
personal/only your keys
WORKSPACE · SALTMARSH
clients/Producers · 19 keys
studio/Everyone · 61 keys
finance/Finance · 6 keys
SSOSigns in with your company. Opens with a key or a password.
FOR A TEAM

One account. Your own store, and the workspaces you are in.

A workspace holds shared stores for the groups in a company. Admins choose who gets which store. Nobody, admins and us included, opens an entry without a key it was sealed to.

SAML and OIDC sign-in
SCIM for people and groups
Policies for keys and reseal times
An audit log you can export
Make a workspace
DATA RESIDENCY · EU

In the EU, under EU law, for everyone.

Your sealed store is kept in [REGION], under the GDPR, by a company based in Denmark. You get that whether you sign up in Lyon or in Seattle.

Read where it lives

Bring a YubiKey, or two. Or come without.

A YubiKey is the strongest way in, and a second one in a drawer is how you get back in if the first is lost. Without one, a passkey your phone or laptop already has signs you in, and a key the app makes, opened by a password, seals your store.

Start with wolpass