Every secret, calm and in its place.
Passwords, passkeys, API keys and one-time codes in end-to-end encrypted vaults. For you, your family, your team, and the bots you run.
Preview data in screenshots — your vault stays private.
GitHub
Login in Private
Last change Today, 9:02. You copied the password on MacBook Air.
Passwords and passkeys, filled for you.
SecretsSi makes strong passwords, saves passkeys, and fills both on every device you use. You stop remembering and start signing in.
- Strong passwords made in one tap
- Passkeys saved and synced, encrypted end to end
- One-time codes right next to the login they belong to
New password
Bots get their own keys, and they expire daily.
Give each script, agent or server its own service account. It reads only the vaults you choose, with a token that lasts one day and renews on its next run.
- One service account per bot, never a shared login
- Read or write access, set per vault
- Every read shows up in the activity log
Who can open what
See what needs care, then fix it.
Your security score shows weak, reused and breached passwords in one calm view. Each fix takes a tap, and the score moves as you go.
- Weak and reused passwords spotted for you
- Breach alerts with a one-tap change
- API keys flagged before they expire
Your security score
A few items need care. Try fixing one.
Short or easy to guess
Same password on more than one site
Showed up in a known data breach
Move from Apple Passwords, 1Password, RoboForm in minutes.
Export from your old app, drop the file in, and review everything before it lands. Duplicates get merged and weak passwords get flagged on the way in.
Review import from 1Password
Going into your Private vault
Private by design, explained plainly.
Your secrets are locked before they leave your device. Here is what that means, without the jargon.
One item, two views
Unlocked on your device, readable only by you.
How your vault unlocks
End-to-end encryption
Items are locked on your device before they sync. What travels and what we store is scrambled data only your devices can open.
Secret Key plus master password
At sign-up your device makes a long Secret Key. Unlocking needs it and your master password together, so a guessed password alone is not enough.
Zero knowledge
We never see your master password, your Secret Key or what is in your vaults. We can't read your items, so we can't leak or hand them over.
Bot tokens that expire every day
Each bot signs in with a token that lasts one day. A leaked token stops working by tomorrow, and you can revoke it any time before that.
Questions, answered
Logins, passkeys, API keys and other secrets, secure notes, payment cards and one-time codes. Everything lives in vaults that you can keep private or share.