An encrypted data vault for everything confidential.
Passwords, access data, contracts, invoices and photos live in cards that are encrypted on your device. Templates keep them in order, previews show documents right in the card, and a link shares a card for as long as you choose.
- Encrypted on the device
- Password stays on the device
- Two-factor with security key
- Storage in the EU
Your vault in four steps
- 1
Create a card
Title, text and files: Postkey encrypts everything on your device.
- 2
Use a template
Password with generator, Wi-Fi, payment card, ID document, licence key.
- 3
Open documents
PDF, Word, Excel and ZIP are shown right in the card.
- 4
Share when needed
By a link with expiry and password, or keep it in the permanent vault.
Temporary and permanent vault
Temporary cards delete themselves after the time you choose; the permanent vault keeps what should stay. Labels, favourites, hidden cards and a search on the device keep order.
- Labels with colours and sub-labels
- Search in titles and texts on the device
- Trash with restore
Templates for passwords and access data
Ready-made cards for passwords with generator and strength meter, Wi-Fi details with QR code, payment cards, ID documents, recovery codes, licence keys and certificates. A copied secret is cleared from the clipboard after 60 seconds.
- Password generator
- Wi-Fi with QR code
- Licence keys and certificates
Documents with preview
Contracts, invoices, spreadsheets and archives are decrypted and shown on your device: PDF, Word, Excel, ZIP, code, e-mails, audio and video.
- Nothing is converted on a server
- Every file can be downloaded on its own
Photos with encrypted thumbnails
Construction progress, damage reports or product photos: thumbnails are encrypted too, and the gallery shows the photos of all cards by month.
- Gallery across all cards
- Full-screen viewer
Sign-in, recovery and devices
OPAQUE sign-in, the account key derived on your device with Argon2id, two-factor with an authenticator app or a security key such as a YubiKey, and a Recovery key that opens the data without the password.
- Log out all other devices
- E-mails about security changes
- Fingerprint unlock on Android
For data that must not get lost or leak
Access data of clients, contracts, certificates and photos that a team needs and nobody else should see.
What the server sees, and what it does not
For teams we set Postkey up together with you: accounts, how cards are shared and which data belongs in the vault.
How Postkey encryptsTexts, titles, file names, file contents, thumbnails and labels reach the server only encrypted.
Your e-mail address, sign-ins, sizes and times of cards and files, and link settings.
If password and Recovery key are both lost, nobody can open the data, not even Sortia Labs.
Files at OVHcloud in Paris with a copy at IONOS in Frankfurt, database on our own server in Germany.
Frequently asked questions
Is Postkey a password manager?
Postkey keeps passwords in encrypted cards with a generator and copies them safely. It does not fill in forms automatically and does not import from other password managers.
What if I forget my password?
With your Recovery key you open the data again and set a new password. If password and Recovery key are both lost, the data cannot be opened any more.
Which second factor can I use?
An authenticator app (TOTP) and security keys such as a YubiKey (FIDO2, USB or NFC). A security key never replaces the password.
On which devices does Postkey run?
As a web app in modern browsers and as an app on Android.
Put your confidential data in a vault.
Create an account and move your first passwords and documents into encrypted cards.