Open Source Recovery Guarantee
Your vault survives us.
Even if VaultPass ceases operations tomorrow, your vault is permanently recoverable using the open-source cryptographic core hosted on GitHub — no VaultPass servers, no login, no subscription required.
How recovery works without VaultPass
Export your encrypted vault
From Settings → export a single .vault file. This is your AES-256-GCM encrypted blob — self-contained, no cloud required.
Get the open-source crypto-core
The exact AES-256-GCM and Shamir implementation that protects your vault, published MIT-licensed on GitHub. Zero dependencies, runs in Node.js or any browser.
Decrypt offline
The module's decryptSeedPhrase function decrypts your exported vault locally — no internet, no VaultPass. Read the code, run its tests, verify it yourself.
AES-256-GCM
Public standard. Decryptable by any compliant tool.
Zero dependencies
Browser-native Web Crypto — no third-party crypto libraries.
Yours to keep
Public MIT repository — fork it, archive it, self-host it.
Open-Source Roadmap
The cryptographic core — AES-256-GCM encryption and Shamir secret sharing — is already open-source and MIT-licensed on GitHub. The rest of the stack follows, ahead of the independent external audit (planned).