Decentralized Security. Zero Compromises.
We are building VaultKeepR to eliminate the single points of failure in modern identity: centralized database honeypots, master password vulnerabilities, and forced email registrations.
Why We Built VaultKeepR
Traditional password managers force users to trust centralized cloud architectures. When central databases are breached, encrypted vaults containing millions of user credentials are exposed to offline brute-force attacks.
VaultKeepR replaces central cloud servers with mathematical guarantees: client-side XChaCha20-Poly1305 encryption, memory-hard Argon2id key derivation, decentralized IPFS peer-to-peer synchronization, and threshold Shamir Secret Sharing recovery.
Core Pillars & Cryptography
100% Zero-Knowledge
All cryptographic keys are derived strictly in local device memory. Plaintext passwords never touch network interfaces or storage disks unencrypted.
Decentralized Storage (IPFS)
Encrypted ciphertext blobs are addressed content-addressed on IPFS and synchronized using Automerge CRDTs, eliminating centralized database targets.
No Email, No Tracking
Authentication via WebAuthn biometric passkeys and Account Abstraction (ERC-4337). No email verification, phone numbers, or analytics profiling.
Shamir Fragmented Recovery
Recovery keys are split into 5 encrypted fragments requiring any 3-of-5 threshold to reconstruct, removing the vulnerability of central password resets.
Engineering & Security Team
VaultKeepR is developed by an international team of security researchers, distributed systems engineers, and open-source contributors with backgrounds in applied cryptography, WebAuthn standards, and peer-to-peer protocols.