End-to-end encrypted
Your private records, locked so tight even we can't look.
Passports, policies, the will, grandma's emergency contact. Encrypted in your browser before they ever reach us.
AES-256
GCM encryption, in your browser
600,000
PBKDF2 iterations on your passphrase
Zero
plaintext records we can read
Why Aegis
Encrypted before it leaves you
Titles and bodies are encrypted on your device. We only ever store ciphertext.
Zero-knowledge by design
We never receive your passphrase or master key. We could not read your vault if we tried.
Honest about limits
We can see categories and counts. We cannot see contents. We say so plainly.
How it works
1
Set a passphrase
It never leaves your device. It unlocks a key only you hold.
2
Add your records
Everything is encrypted in the browser before it is sent to us.
3
Share safely
Give household members access. The database enforces who sees what.
Ready to lock down your records?
See exactly what Aegis stores, and what it can never read.
Read the security model