Keyvalv Get notified at launch

Coming soon · Chrome extension

Your passwords, in your cloud. Not ours.

A Chrome extension that fills logins from a standard KeePass (KDBX 4) file in your own synced folder. No server of ours holds your vault or keys, and the extension makes no network requests.

Launch news only. Every email has a delete link. Privacy

Thanks. We will email you at launch.

That did not go through. Check the address and try again.

Something went wrong on our side. Try again in a moment.

Too many tries. Wait an hour and try again.

A sign-in form on example.com with Keyvalv's key in the email field and its list open, offering the two logins saved for that site: “you@example.com”, “Personal”, and “you.work@example.com”, “Work”.

Click the key, choose the login.

Only the logins saved for that site are offered, so a lookalike address gets nothing.

Three promises

  • Nothing to breach

    Your vault is encrypted on your computer before your sync app uploads it, so your cloud holds your passwords only encrypted, and no server of ours holds them.

  • Never locked in

    It is a standard KeePass file, so if Keyvalv disappears it opens in KeePassXC and other KeePass apps that read KDBX 4: you lose the autofill, tamper check and emergency sheet, not your passwords.

  • Already on KeePassXC?

    Keep your file if your master password alone opens it. Keyvalv fills from it with no desktop app to pair, and changes nothing in it until you choose Protect.

KeePass opens an old copy without a word. Keyvalv does not.

Your Keyvalv computers sign every change into a history in the file. A computer that has opened your vault before refuses an old copy, a forged history or a device you never approved, and keeps your last good copy. An edit in another KeePass app is listed item by item, for you to accept. A computer that never opened your vault, or whose browser data was cleared, has nothing to compare with, so it accepts an old copy or a vault someone with your master password made in its place.

What it catches, and what it cannot

Keyvalv's toolbar popup, locked, with a card: “Keyvalv refused your vault file”. “The file in your storage is older than the one this browser last saw: an old copy was put back. Keyvalv kept your last good copy, so nothing is lost.” Buttons: “Fix it in settings” and “Not now”.
An old copy put back: refused, and your last good copy kept.
Keyvalv's toolbar popup, unlocked, with “Changes made in another app (your phone?)”: “Mail”, mail.example, “Password changed”, and “Library”, library.example, “Added”, above the button “Accept these changes”.
An edit in another KeePass app: listed item by item, for you to accept.

What it does in Chrome.

  • Saves as you sign in

    After you sign in, Keyvalv offers to save the login or update a changed password, so your vault keeps up without retyping.

  • Makes strong passwords

    On a sign-up form, the key suggests a strong random password of 20 characters, so you never have to invent one.

  • Passkeys on every computer

    Keyvalv keeps a site's passkey in your vault, so it works on every computer where you use Keyvalv.

  • Fills cards and addresses

    Pick a card or an address from the key on a secure checkout, so paying no longer means copying numbers one by one.

  • Unlocks with Touch ID

    Turn on Touch ID or Windows Hello, so a short auto-lock costs a touch, not a long password; Keyvalv asks for your master password every 14 days, so you keep it in mind.

  • Moves in from your old manager

    Bring your logins from Google Password Manager, 1Password, Bitwarden, LastPass and others, read on your own computer, so switching uploads nothing.

Limits

  • Needs Chrome 137 or later; Edge is not tested yet.
  • Your vault opens with its master password alone: Keyvalv does not open a key-file or YubiKey vault as your vault, though it can import from a key-file one.
  • Not open source, though every installed copy carries its own code unminified, so it can be read; only the Argon2 key derivation is a published library's compiled WebAssembly.
  • Not yet independently audited; the security page will say when it is.
  • Built by Freshlogik IT AB with an AI coding assistant.
  • After an edit in another KeePass app, such as KeePassXC, Keyvalv saves nothing new until you accept that edit.
  • Keyvalv doesn't run on phones; which phone KeePass apps open your file is checked before launch.
  • Sync apps such as iCloud Drive and Dropbox are checked by hand before launch.
  • Pricing is announced before launch.

Questions people ask

What if I forget my master password?

Nobody can reset it, not even us, because it never reaches us. Setup gives you an emergency sheet to print, and its code opens your vault, so keep the sheet somewhere safe.

Does it work on my phone?

No: Keyvalv runs only in Chrome on a computer. Your vault is a standard KeePass (KDBX 4) file in your synced folder, and whether phone KeePass apps such as KeePassDX and KeePassium open it is checked before launch.

What does Keyvalv add to my KeePass file?

Nothing until you choose Protect. Then its change history and its devices' secrets go into the file's custom data, and your emergency sheet's locked copy of the password into its header. KeePassXC keeps all of it when it saves, so the file opens there as before.

Can I share passwords with my family?

Not in the first release: there are no shared vaults, and each person keeps their own. To hand someone one login, “Give a copy…” makes it a small KeePass file locked with a six-word passphrase, so it opens in KeePassXC and other KeePass apps that read KDBX 4.

What does it cost?

Nothing until launch. Pricing is not set yet; it is announced before launch. If you ever stop paying, your vault is still a KeePass file, so it keeps opening in KeePassXC and other KeePass apps that read KDBX 4.

Coming soon to Chrome.

Launch news only. Every email has a delete link. Privacy

Made in Sweden by Freshlogik IT AB. Valv is Swedish for vault. hello@keyvalv.com