Back

About

Security model

No data ever leaves your browser

Content Security Policy blocks all network requests after the page loads.

Nothing is saved to disk. Refreshing the page erases everything.

Open source

PBKDF2-SHA256

In hash mode, your password is processed with PBKDF2-SHA256 (600,000 iterations). Even if the browser's memory is exposed, the original password cannot be recovered.

Content Security Policy

default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data:; connect-src 'none'; font-src 'self'; form-action 'none'; base-uri 'self'; frame-ancestors 'none';