A personal vault for the things that prove who you are — passwords, passkeys, SSH and API keys, cards, documents. Encrypted on your own machine. Nobody else can read it, including us.
Zero knowledge
Records are encrypted before they leave your Mac. Sync storage holds opaque blobs, record ids and timestamps — never a title, a username or a password.
Recipient key slots
Each way in owns a durable keypair, and the vault key is wrapped to each one. Revoking a stolen device needs only the public keys of the rest. The paper kit is printed once.
Signed membership
Who may open the vault is published in an Ed25519-signed, hash-chained manifest. Adding a recipient or rolling back a generation is detected by every client.
Tempering
Tempering is the heat treatment that makes steel hard and tough rather than merely hard. The mark shows the colours a smith reads off the surface to judge it.
Status: in development, and honest about it. Tempern has had no external security review, and sync is new. It is not yet a replacement for your password manager — keep the one you have as the authoritative copy. There is nothing to download here yet.