100% Offline-First · Argon2id + XChaCha20-Poly1305 · AGPL-3.0 Open Source

Own Your Passwords.
Zero Knowledge. Zero Compromise.

The only offline-first password manager with built-in 2FA and zero cloud dependency.

Core Security Pillars

Engineered From First Principles

No Google login, no telemetry beacons, and zero host-page DOM injection.

Zero-Knowledge Sync

100% offline by default. When you opt into cross-device sync, our self-hostable Rust Blind Relay stores only 256-byte padded XChaCha20-Poly1305 blobs and merges updates via Hybrid Logical Clock (HLC) CRDTs.

Built-in 2FA

Generate RFC 6238 6-digit and 8-digit TOTP codes with a live 30-second countdown ring (Amber-500 transitioning to Rose-500 under 5s) and enroll 2FA QR codes offline straight from your active tab.

WebAuthn Biometrics

Unlock your vault in milliseconds using hardware-backed WebAuthn PRF (hmac-secret) on desktop or Secure Enclave / StrongBox on mobile, protected by a strict 3-strike fallback and Shamir 2-of-3 recovery.

100% Open Source

Licensed under AGPL-3.0 with deterministic reproducible builds (SOURCE_DATE_EPOCH) and a published white-box penetration test report so you never have to take our word for it.

Simple 3-Step Workflow

How It Works

Zero cloud signups. Up and running in under 30 seconds.

Create Vault

Set your Master Password offline. VaultGuard stretches it via Argon2id (64 MiB) to wrap your 256-bit Data Encryption Key and generates your 24-word recovery phrase.

Add Passwords

Save logins, scan 2FA QR codes from your active tab, and autofill safely with our 5-Point Anti-Clickjacking Guard and 100% offline domain avatars.

Sync via Blind Relay

Optionally enable Blind Relay Sync in Settings to synchronize 256-byte padded ciphertexts across desktop and Android/iOS using Ed25519 challenge-response auth.

Ready to take back control of your credentials?

Load arca-extension-ready.zip in Chrome or deploy your own Rust Blind Relay in 1 click.

Own Your Passwords. Zero Knowledge. Zero Compromise.