Every password in one place
Name, user, password, address and a note. Search finds it while you type.
Ukari Vault
Your passwords, in a vault not even we can open
One passphrase unlocks everything. What leaves this page is a block of bytes with no key attached.
In Ukari Tools, with the links · unlimited passwords on the free plan
Free plan that does not expire
No card to start
Servers in Brazil
Bank · 4417 · my strong passphrase
k7Qm2VbXpR9tLzA4eGh1YnNlY3JldA0KYmFuY28ZTdcPq1vB8xKf
Typed here, encrypted here. The server receives the second line.
What you get
What Ukari Vault does
A generator that does not repeat itself
Twenty characters by default, drawn without the modulo bias that makes some letters come up more often than others.
Strength measured in bits
Not “weak” or “strong”. The number of bits an attacker would have to guess — the same figure they would compute.
It opens on its own on your device
The key stays in this browser after the first unlock. The passphrase is never stored, anywhere, and one tap on Lock erases the key.
Copies and forgets
The password goes to the clipboard and is wiped from it thirty seconds later.
No recovery — by design
If Ukari could recover your passphrase, Ukari could read your passwords. It cannot, and that is the product.
Honestly
Use something free
Use this
Honestly: when to use another one
You want a browser extension that fills forms
Bitwarden and Proton Pass have extensions on every browser and fill logins for you. We do not — yet. If that is what decides it for you, use them.
You want one account for the whole company
The same login that runs your ERP, your links and your vault, with two-factor authentication and session revocation in one place. One supplier, one invoice, one list of who has access.
In something that encrypts before sending, not in a spreadsheet or in the browser. Here, the key is made on your device from your passphrase with PBKDF2 and 600,000 iterations, and the encryption happens before anything leaves the page.
No, and it is not a policy — it is how it is built. The server receives an encrypted block and an initialisation vector. There is no field for a title, a site or a username: metadata in the clear would let anyone infer what you keep.
The vault becomes permanently unreadable — to you and to everyone, including us. That is why there is a Recovery Kit, shown once when you create the vault. Save it. The warning appears before your first password, not buried in the terms.
No. After the first unlock, the key stays in this browser and the vault opens on its own. What is stored is the key, marked so that no script can read it back out — never the passphrase. “Lock this device” erases it.
Yes. It runs in the browser and installs as an app. On PRO the same vault syncs between computer and phone, always encrypted in transit and at rest.
No. The same Ukari account works for the Vault, Ukari Link, the ERP and DataLog.