Features

One app, all your keys.

Everything you need, from passwords and passkeys to autofill and team sharing. On the web, on mobile and in your browser, end-to-end encrypted and free.

Free · $0KeyZula · every feature included, no credit card required

Password manager

Logins, cards, identities and secure notes in one encrypted vault.

  • Folders, favorites and instant search
  • Password history to roll back changes
  • Multiple websites per item
  • Trash protects against accidental deletion

Autofill and browser extension

Fill in login forms with one click. KeyZula suggests the right account for every site.

  • Inline suggestions with site icons, plus a prompt to save new passwords
  • Copy menu: username, password, 2FA code and card details
  • Card autofill in payment forms: number, expiry, CVV and cardholder in one click (browser extension and Android; HTTPS pages only)
  • Card brand recognition: Visa, Mastercard, American Express, Troy and more are detected from the number and shown with their logo
  • One-click 2FA code fill, even across split input boxes
  • The 2FA code is copied to the clipboard after autofill (can be turned off)
  • On Chrome, Edge, Firefox and Safari
  • System AutoFill in every app on iOS and Android

Built-in 2FA authenticator

Your two-factor codes live right next to your passwords. No separate app needed.

  • Scan the QR code on the current page with the browser extension
  • Upload or paste a QR code image
  • Move every account from Google Authenticator at once
  • SHA-1, SHA-256, SHA-512 and Steam Guard
  • Codes sync encrypted across your devices
  • 2FA codes in iOS and Android AutoFill

Passkeys

The new standard for passwordless sign-in. Keep your passkeys in your vault and use them on every device.

  • Sign in to websites with passkeys in the browser extension, on iOS and on Android
  • Passkeys are end-to-end encrypted and synced too
  • Sign in to KeyZula itself with a passkey; no master password on trusted devices
  • Phishing-resistant: a passkey only works on the real site

SSH keys and SSH agent

Keep your server keys in your vault instead of scattered files, and let ssh and git sign with them directly.

Setup and usage guide
  • Built-in SSH agent (macOS and Linux): private keys never touch the disk
  • Sign git commits with an SSH key from your vault
  • Optional: confirm every signature, auto-lock when idle
  • Ed25519, RSA and ECDSA keys, including passphrase-protected ones
  • Generate Ed25519 keys in your browser, import OpenSSH keys
  • Share with your team by department

Security report

See at a glance which of your accounts are at risk.

  • Finds passwords exposed in data breaches via Have I Been Pwned
  • Flags reused and weak passwords
  • Lists accounts without 2FA
  • On the web and on mobile; your passwords never leave your device (k-anonymity)

Command line and service accounts

Stop writing secrets into code and .env files. Your app, CI job or AI agent fetches them from the vault at run time.

Setup and usage guide
  • keyzula read, run and inject resolve kz:// references at run time
  • Service accounts: read-only access to the collections you choose
  • Zero knowledge: tokens are created in your browser, the server can't read secrets
  • Revoke each token on its own, with an optional expiry date
  • Every read is written to the organization's audit log
  • Works with GitHub Actions, Docker and MCP servers

Password generator

Unpredictable, unique passwords for every account.

  • Cryptographically secure randomness
  • 4–128 characters; you choose the character sets
  • Memorable passphrases
  • Exclude look-alike characters (0/O, 1/l)

Secure sharing

Share selected items with family or team. Everyone sees only what they're allowed to.

  • Organizations, departments and collections
  • View, edit or "can't see the password" permissions
  • Shares are encrypted to each recipient's own key
  • Access ends immediately when revoked

Access logs and reports

Know who viewed, copied or autofilled a shared password, and when.

  • Views, copies, autofills, passkey and SSH key use are recorded
  • A full access history for every item
  • Organization access report by item and by member, exportable as CSV
  • Only you can see how the items in your personal vault are used
  • Only the item's ID reaches the server, never its name or contents
  • See your own usage on the Activity page

Send

Pass on a password or a private note securely, even to someone without an account.

  • An end-to-end encrypted link that expires
  • The recipient doesn't need a KeyZula account
  • Optional password and view limit
  • The decryption key stays in the link and never reaches our server

Files

Store your documents encrypted: IDs, passports, contracts and deeds, all in one place in your vault.

  • Documents are encrypted on your device before upload
  • All your documents together in the Files section
  • Synced and shareable like your other items
  • Free, with no paid storage add-ons

File attachments

Keep documents like a recovery file or a contract right next to the item they belong to.

  • Files are encrypted on your device before upload
  • 100 MB per account, up to 25 MB per file
  • Shared and synced along with the item
  • Free, with no paid storage add-ons

Emergency access

If something happens to you, someone you trust can still reach your vault, and you stay in control.

  • Invite a trusted person by email as your emergency contact
  • A request only opens after a waiting period you choose (1–30 days)
  • Reject it before time runs out, or approve it right away
  • Read-only access, on the web and on mobile

On every device, made for each

The same vault from iPhone to Mac and from Android to your browser, with a layout that fits every screen.

  • Three-pane layout on iPad and Apple Silicon Macs
  • Face ID, Touch ID and Android biometric unlock
  • iOS and Android AutoFill: passwords, 2FA codes and passkeys
  • The mobile app opens your last synced vault offline too
  • A web vault with nothing to install
  • Command-line tool for macOS and Linux

Privacy first

Not just your data, your habits belong to you too.

  • Site logos are never fetched from third parties
  • Item names and website addresses are encrypted too
  • Clipboard clears itself (1 minute by default)
  • Vault locks automatically when idle

Account security

Your vault stays protected even if your master password leaks.

  • Two-step sign-in with an authenticator app, plus a recovery code
  • Passkey sign-in; no master password on trusted devices
  • Quick unlock with Face ID, Touch ID, fingerprint or PIN
  • Email alerts for unrecognized devices; sign out sessions remotely

Organization admin and policies

Manage your team's vault in one place and decide who gets access to what.

  • Single sign-on via OIDC: Microsoft Entra, Google, Okta, Keycloak
  • Admin-approved devices
  • Policy to disable exports
  • Owner, admin and member roles
  • Event logs and access report
  • Machine access with service accounts

Easy switch

Move over from your current password manager in minutes.

  • Import from Bitwarden, 1Password and LastPass
  • Passwords from Chrome, Edge, Brave, Opera, Firefox and Safari
  • Folders, favorites and 2FA keys are kept
  • The file never leaves your browser unencrypted

On the way

The web vault, the iOS and Android apps, the Chrome, Firefox and Safari extensions and the command-line tool are ready. Coming next:

SAML and SCIMSoon

Automatic member provisioning from your identity provider

Self-hostingSoon

A Docker package to run KeyZula on your own infrastructure

Secure your keys today.

Create an account in seconds. Completely free, no credit card required.

Get Started Free