🔐

A password vault we could not read even if we wanted to

Encrypted on your device with a passphrase that never leaves it.

Everyone with more than five passwordsPeople currently reusing one password
Open it free →

What it does

01

Zero-knowledge by design

Your master passphrase never reaches Calenote's servers. Everything is encrypted and decrypted on your own device — the same approach already used by the Health vault, which is live today.

02

Built into the app you already use

One login, one interface. No separate app, no separate subscription, no extension to install and forget.

03

The same honest trade-off

Because the passphrase never leaves your device, a forgotten passphrase cannot be reset by us. That is not a limitation to hide — it is the proof that the encryption is real.

Getting started

Three steps. Nothing to configure.

  1. 1

    Open the dashboard, choose 🔐 Vault, and set a master passphrase. Write it down somewhere physical — it cannot be recovered.

  2. 2

    Press + New password. A strong one is generated for you; add the site and username, and it saves itself.

  3. 3

    Copy a password with one tap — the clipboard clears after 30 seconds, and the vault locks itself after 5 minutes idle.

Why it's worth it

Password reuse is the actual risk

Most account compromises trace back to one password used in several places. A vault makes unique passwords practical rather than aspirational.

A note app is not a password manager

Passwords kept in a plain notes app or a phone contact are readable by anything that reaches that device or account.

Password Vault — frequently asked questions

The things people actually ask before signing up.

Is the Calenote password vault free?

Yes. The vault, the password generator, strength and reuse warnings are all free with a Calenote account.

What does zero-knowledge encryption mean?

It means the encryption key is derived from your passphrase on your own device, and the passphrase is never sent to the server. The service stores only encrypted data it cannot decrypt.

What if I forget my master passphrase?

It cannot be recovered — that is the direct consequence of real zero-knowledge encryption. You will be asked to record it somewhere safe when you set it up.

Does it fill in passwords on websites for me?

No, and that is deliberate. Autofill needs a browser extension with access to every page you visit; until that can be built properly, the vault stores and copies rather than pretending to do more.