🔒 End-to-end encrypted. Your master password is the only key — not even we, Azure, or any government can read your data without it.

Jesto Vault

Your secrets, end-to-end encrypted.

AES-256-GCM encryption on every field
Zero-knowledge — your master key never leaves this device
MFA required on every sign-in
Auto-locks after 4 hours of inactivity

Not even we, Azure, or any government can read your data without your master password.

Sign in

Sign in to your vault

Display Name

Username

User Password (first-time setup only)

Master Encryption Key

MFA Code

or

Jesto Vault

Welcome

Search everything... Ctrl+K

🔐 How your vault stays private

AES-256-GCM encryption on every field and every file
Your key is derived from your master password via PBKDF2-HMAC-SHA256 (300 000 iterations)
Your master password is never stored, never transmitted in plain text, never logged
If you forget your master password, your data is unrecoverable — that's the point

🔒 Zero-knowledge · AES-256-GCM · Your master password is the only key

Confirm Identity

Enter your master password to access this secret.

🔒 Your master password is verified locally against an encrypted check value — it is never stored or transmitted.

Set Up MFA

Scan this QR code with Google Authenticator or any TOTP app.

Enter the 6-digit code to verify