Starkive Vault · for Mac and Windows

Your secrets.
Your key.

Passwords, API keys, notes, recovery phrases and 2FA codes, locked with a master password that never leaves your machine. Nobody else can look inside. That includes us.

  • Zero-knowledge
  • No account
  • Works offline

Part of Starkive Studio’s one-time $1.99 unlock. macOS 13 or later, Windows 10 or 11.

Starkive Vault on a Mac, unlocked, with demo entries: logins, a Wi-Fi password, a hardware wallet phrase and a live 2FA codeOn Mac
Starkive Vault on Windows 11, locked, asking for the master password with a Use Windows Hello optionOn Windows

What goes in

Every secret, one safe place.

Stop keeping passwords in a note, keys in a text file and recovery phrases on a sticky. Each kind of secret gets the fields that fit it.

  • Logins
  • API keys
  • Secure notes
  • Recovery phrases
  • File passwords
  • 2FA codes

Hidden until you ask

Secrets stay masked on screen. Reveal one when you need to see it, or copy it straight to where it's going.

File passwords

Keep the passwords for the archives you seal next to everything else, so a locked file is never a lost file.

Recovery phrases

The words that restore a wallet or an account, somewhere far better than a photo on your phone.

How it’s locked

A vault that can’t be read. Even by us.

Everything is sealed on your own machine under one password you choose. There’s no account to breach and no server holding your vault.

The datasheet

Master passwordChosen by you. Never stored, never sent
Key derivationArgon2id, memory-hard
EncryptionAES-256-GCM
Where it livesOn your machine
AccountNone
UnlockMaster password, Touch ID or Windows Hello
BackupOpt-in. The encrypted vault only

Argon2id

Your password runs through a memory-hard function to make the key, so guessing it by brute force is expensive, not just slow.

AES-256-GCM

Every entry is sealed with AES-256. A copied vault file is useless without your master password.

Touch ID or Windows Hello

Unlock with your fingerprint, face or PIN on that device. The master password stays the root of trust.

A password nobody stores is a password nobody can reset

We never see your master password, and the app never writes it down. That’s the whole point. It also means that if you lose it, we can’t get your vault back. Keep it somewhere you’ll still have it in five years.

Built-in authenticator

Your 2FA codes, right there.

Add the two-factor secret when you set up a login, and the six-digit code ticks along beside it. No second app, no phone to dig out.

More about the authenticator

A demo Chase Business login in the Vault with its live six-digit two-factor code

Standard TOTP

The same time-based codes as any authenticator app, so it works with the sites you already use.

Sealed like everything else

Two-factor secrets are stored inside the vault, under the same key as your passwords.

Always on your machine

Codes are generated locally. Nothing is fetched from anywhere to make them.

Backup

Backup that stays locked.

Turn it on and your vault is saved to your own cloud storage, still encrypted. Only your master password opens it.

On Mac

Back up to your iCloud Drive. On a new Mac, choose Restore from iCloud Drive when you set up the Vault.

On Windows

Back up to your Google Drive or OneDrive.

Only ciphertext leaves

The backup is the vault file exactly as it’s stored: encrypted. Your cloud provider can’t read it, and neither can we.

Off until you say so

Backup is optional. Leave it off and your vault never leaves your machine.

Questions

Good to know.

I forgot my master password. Can you reset it?

No, and nobody can. We never have a copy of your master password, which is what keeps the vault private. Without it the vault can't be opened. If you set up Touch ID or Windows Hello, you can still unlock with it and copy your entries somewhere safe.

Can Starkive see what's in my vault?

No. Your entries are sealed on your machine with a key only your master password can produce. There's no account and no server that holds your vault.

What happens if I lose my computer?

If you turned on backup, restore it on your new machine and unlock it with your master password. On Mac, choose Restore from iCloud Drive when you set up the Vault. Without a backup, the vault stays on the old machine.

Is the Vault free?

Storing entries in the Vault is part of Starkive Studio's one-time $1.99 unlock. It's never a subscription.

Does it autofill passwords in my browser?

No. Starkive Vault is a place to keep secrets safely, not a browser extension. Copy what you need from it when you need it.

Lock it down. Keep the key.

Starkive Vault comes with Starkive Studio on Mac and Windows.