A free password manager that cannot read your passwords
Most “free password managers” are a database with a login screen in front of it: the company can read every entry, and so can anyone who takes the database. CalculatorAI's vault is built the other way round. Your master password is stretched with PBKDF2 (600,000 rounds) into a key that wraps a random vault key; every login — title, username, password, website, notes — is sealed with AES-256-GCM in your browser before it is saved. The server stores blobs and two wrapped copies of the key, and has no way to open either.
A recovery code shown once at setup unlocks the vault if you forget the master password; there is no reset by email, because a reset we could perform is a vault we could read. Two-factor sign-in hides the vault's tables from any session that has not given the authenticator code. The vault locks itself, the clipboard clears itself, and export is free and complete on every plan.
Zero-knowledge storage
No plaintext columns and no server-side search. A copy of the database, a rogue admin or a stolen session cookie gets ciphertext.
Master password + recovery code
Two independent wraps of one vault key. Changing the master password re-wraps the key and touches nothing you saved.
Two-factor sign-in
TOTP in any authenticator app. The database refuses vault rows to sessions that skipped the second factor.
Built-in generator and strength meter
Every password field can generate 12–32 random characters and shows the same entropy read as the Password Generator. Passwords older than a year are flagged.
Import from your browser
Chrome, Firefox, Safari, Edge, Bitwarden and 1Password CSV are read locally and encrypted row by row. Export CSV or JSON any time, free.
Locks itself
After 1, 5, 15 or 60 idle minutes, a minute in the background, on leaving the page and on sign-out. Copied secrets leave the clipboard in 30 seconds.