All your passwords in your pocket, behind your fingerprint. Content is encrypted on the device before it leaves it — and the server it is stored on is yours.

For Android 8 or newer and iPhone on iOS 15.1 or newer. On the desktop, there is the extension for Chrome and Edge.

• Opens with your fingerprint. Touch the sensor and the vault is open. The master password is only asked for the first time on a device.
• Holds more than passwords. Cards, notes, keys, documents — and file attachments, encrypted in here too.
• Shows your two-step code. Point the camera at the service's QR code and the six-digit code starts showing up, always current, next to the password.
• Shares with whoever needs it. A team vault is visible to the team; a single secret can go out as a temporary link that you deliver through whatever channel you trust.
• Brings over what you already had. Import the passwords saved in Chrome, 1Password, Bitwarden, LastPass or a spreadsheet — the file is read on the device and never uploaded as-is.
• Tells you when a password is weak or leaked. The check runs on the phone itself, against known-password lists, without telling anyone which ones are yours.
• Works without internet. Whatever you have already opened stays available on a plane, in a lift, in the middle of nowhere.

Stop using it and the vault locks itself.

The difference is not in the screens, it is in who can read what you stored.

• Encrypted before it leaves the device. What travels over the network, what sits on the server, and even the offline copy are all ciphertext.
• The server is yours. HedHog Vaults has no central cloud. It connects to the HedHog installation you point it at — your company's, yours.
• Not even HCODE can read it. We do not hold your data, and even if we did we would not hold your key: it is derived from your master password, on your device, and is never sent anywhere.
• One destination, no middlemen. The app talks to exactly one address: the server you configured. No telemetry, no tracking, no third parties in the loop.

1. Enter the address of your HedHog server. No address is baked in: the app only knows who to talk to once you tell it. Even the colours on screen come from there.
2. Sign in to your account. E-mail and password, or the sign-in your company already uses.
3. Unlock the vault. Your master password and recovery key open the content the first time; after that, your fingerprint does it.

From there, just use it. No HedHog server yet? Start with getting started.

What is stored, where, and for how long is described in the Privacy Policy.