Zecuri – Password Manager

Zecuri is a zero-knowledge password manager for privacy-conscious users. Your passwords are encrypted on your device before leaving it—only you hold the decryption keys. **Why Zecuri?** 🔐 **Zero-Knowledge:** Your master password derives all encryption keys via Argon2id. Zecuri's server stores only ciphertext and signed sync metadata—never plaintext passwords. 🔄 **End-to-End Encrypted Sync:** Passwords sync securely between Android, iOS, and Chrome. The server cannot decrypt your vault. 🔑 **Master Password Only:** One master password, no secondary authentication, no recovery codes. Simple. Secure. 🌍 **Privacy by Design:** Built in Sweden (EU), GDPR compliant. No analytics, no telemetry, no tracking of your vault or browsing. 📖 **Open Source:** Vault encryption, sync protocol, and client code open for community review on GitHub. **Current Features:** ✓ **Password Vault:** Store and organize passwords, credit cards, secure notes, and identity records. ✓ **Autofill:** Use Zecuri as your autofill provider on Android. Fill logins in apps and Chrome with one tap. ✓ **Password Generator:** Create strong, random passwords with customizable length and character sets. ✓ **Search & Tags:** Filter by site, username, custom tags; full-text search across vault. ✓ **Vault Encryption:** AES-256-GCM encryption of vault data; Ed25519 signing of sync metadata. ✓ **Cross-Device Sync:** Changes on Chrome, iOS, or Android sync instantly across all devices. **How It Works:** 1. Create a master password (stored locally, never sent to Zecuri). 2. Master password is stretched with Argon2id locally. This derived key encrypts your entire vault. 3. Your encrypted vault syncs to Zecuri's server. 4. When you unlock on another device, the same master password re-derives the same key and decrypts your vault. 5. Server never stores the master password or decryption key—only Ed25519-signed sync metadata. **Security & Privacy:** • Vault encrypted with AES-256-GCM (industry standard) • Master password salted and hashed locally with Argon2id (not sent to server) • All sync operations verified with Ed25519 signatures • No plaintext vault data ever leaves your device • GDPR compliant (EU infrastructure) • Regular security audits (details on GitHub) **What's Planned:** • Firefox & Safari browser extensions • Passkey support (WebAuthn) • Biometric unlock enhancements **Requirements:** • Android 11+ (Android 12+ recommended for autofill stability) • Internet connection for sync (optional—works offline) • No Google account required; no linking to Chrome or other services **Support & Privacy:** • Privacy Policy: https://zecuri.com/legal/privacy • Terms of Service: https://zecuri.com/legal/terms • Contact: [email protected]

2026-09-05 21-08 - Zecuri - In-app subscribe uses Subscribe / Restore only (no amount in the app). - Reviewer demo vault unchanged.