Product preview · in development

Your digital keys. Only yours.

loxal Password Manager is being designed as an accountless, end-to-end encrypted home for passwords, passkeys and sensitive records—powered by one shared Rust core across Voxa on iOS and Vynx on Chromium.

Explore the security design See the platform plan

One encrypted foundation

More than a password list

The first preview is planned around the credentials people actually move between devices and browsers.

Passwords and TOTP

Generate, organize and fill strong logins and time-based one-time codes without automatic form submission.

Portable passkeys

Create and use encrypted passkeys through iOS AutoFill and guarded Chromium integration, with native fallback.

Structured secrets

Keep secure notes, cards, identities and SSH keys in versioned records rather than one fragile document.

Personal and team vaults

Separate audiences cleanly and share an encrypted vault with Owner, Admin, Editor and Viewer roles.

Offline first

Keep working from an encrypted local database while a durable outbox reconciles changes after reconnecting.

Conservative migration

Preview imports from Bitwarden, Proton Pass and Apple Passwords; preserve conflicting secrets instead of guessing.

E2E encryption design

The server design stores ciphertext, not your secrets.

The design keeps titles, usernames, URLs, passwords, item types and readable audit details encrypted. A high-entropy recovery phrase enrolls a device; a separate local password or iOS biometrics unlocks it day to day.

Losing the recovery phrase with no enrolled, unlocked device is intentionally unrecoverable. There is no server-side password reset that can decrypt the vault.

1Recovery secretRandom, checksummed and kept by you
2User root keyWrapped for recovery and local unlock
3Vault rotation keySeparate for each personal or team vault
4Per-item data keyA fresh key and nonce for every encrypted record

Rust at the center

One core, native experiences

The internal Rust module is named vault. Platform code stays focused on UI and operating-system integration.

Voxa for iPhone and iPad

A native SwiftUI vault is planned alongside an iOS credential-provider extension backed by the shared Rust core.

  • Select Voxa as an AutoFill password and passkey provider in iOS Settings.
  • Unlock with Face ID or Touch ID while keeping a device-local password fallback.
  • Decrypt only the credential selected for the current request.

Vynx for Chromium

The Vault module will be disabled by default and enabled explicitly from Vynx options.

  • Exact-origin automatic fill with no automatic submission.
  • Passkey interception remains a separate opt-in.
  • Brave is the primary test browser.

Designed for the bad days

Failure should be visible and recoverable

The implementation plan favors boring, testable recovery paths over silent data loss.

Conflicts become copies

Concurrent secret edits are preserved for review instead of being silently overwritten by timestamps.

Deletes remain recoverable

Versioned tombstones protect synchronization while a retention window leaves room to undo mistakes.

Rekeying resumes safely

Removing a team member triggers a staged, verifiable rotation designed to resume after interruption.

This is a product-direction preview

loxal Password Manager is under active development. This page describes intended behavior and security boundaries; it is not a download page, public launch announcement, independent security audit, or promise that every capability is already available.

Real-credential use and public distribution remain gated on threat-model review, deterministic platform tests, dependency and license review, privacy disclosures, and an independent security assessment.