Zero-knowledge credential managerPasswords · passkeys · TOTP · email masks
[ SPCTR // LIVE // EXT v0.8.0 ]

YOUR IDENTITY
IS NOW GHOSTED.

SPCTR keeps your passwords, your two-factor codes and your real email address out of everyone else's hands — including ours.

Everything is locked on your own device before it ever reaches us, so all we can ever see is scrambled data. Try the live demo to see exactly how it works.

Free plan available · no credit card required

SPCTR-VAULT · GUIDED_SANDBOXLIVE
[ DEMO_OPERATOR ]

Welcome back, Morgan.

Your private protection controls in one place.

Activity

/ signal_stream
[SYNC]encrypted demo vault synchronized
[MASK]north-star-27@spctrmail.com active
[AUTH]passkey verification available

Command center

Your protection posture at a glance

Demo data · no account connected
▸ try the guided product sandboxsignal_stable
One vault. Every surface.

Your encrypted data stays in reach as SPCTR expands across platforms.

Web Vault
available
Chrome
available
Firefox
available
Android
in build
iOS
in build
Safari
planned
[ Core features ]

Easy to use.
Built to protect you.

Whether you're securing your first account or managing a more advanced setup, SPCTR keeps your passwords, two-factor codes, private email aliases, and breach alerts together in one encrypted place.

Password Vault

Stores every password behind one master phrase you set. We only ever see a scrambled blob — the real thing is decoded on your device.

2-Factor Codes

The 6-digit codes that refresh every 30 seconds — right inside SPCTR. No separate Authenticator app to juggle.

Email Masks

Create a private @spctrmail.com alias for each sign-up. Messages reach your usual inbox, and you can disable an alias at any time if it starts receiving spam.

Breach Alarm

We check your emails and passwords against known leaks. If yours show up, you'll know within seconds — not months.

Passkeys & Keys

Sign in with Face ID, Touch ID, Windows Hello or a YubiKey — and let SPCTR store passkeys for other sites too. No password to phish.

Notes & Secrets

Secure notes, API keys, SSH keys, cards and IDs live in the same encrypted vault, on every device and inside the extension.

[ Trust architecture // zero knowledge ]

Your vault is unreadable everywhere but your device.

Your passphrase and encryption keys never reach SPCTR. We store encrypted blobs, routing metadata, and account information—but never plaintext vault contents.

Read the threat model
On-device encryption

AES-256-GCM seals each item before it leaves your device.

Hardened key derivation

Argon2id turns your passphrase into a key that remains in memory only.

Recovery you control

Encrypted export and offline recovery protect access without giving SPCTR your key.

Your deviceEncrypted blobBlind sync
[ Built for every deployment ]

Protection that fits the mission.

Cover yourself, look after everyone at home, or roll SPCTR out across a whole company with proper admin control.

Individuals

Your passwords, sign-in codes, masked email addresses and breach alerts, all in one private vault.

View personal plans

Families

One plan covers up to five people, and everyone still keeps their own private vault that nobody else can open.

Compare family plans

Organizations

Buy licences in packs, let staff sign in with their work Microsoft account, and cut off access the day someone leaves.

Explore enterprise
[ Deployment Tiers ]

Choose your tier.

The free plan stays free for good. Upgrade when you want unlimited email masks or coverage for the whole family, and cancel from the billing portal whenever you like. Buying for a team? Take a look at the enterprise license packs.

Compare every plan
[ LVL_01 ]

Free

Everything you need to disappear online.

$0/mo
  • ›Password generator
  • ›TOTP authenticator (5 codes)
  • ›3 email masks
  • ›Breach checking
  • ›1 device sync
Start free
[ LVL_02 ]Recommended

Plus

For people who take privacy seriously.

$4/mo
  • ›Unlimited TOTP codes
  • ›Unlimited masks
  • ›Passkeys & vault sync
  • ›5 devices
  • ›Priority breach alerts
Upgrade to Plus
[ LVL_03 ]

Pro

Zero-knowledge suite for pros and teams.

$9/mo
  • ›Everything in Plus
  • ›Unlimited devices
  • ›Browser extension pro
  • ›Priority support
Go Pro
[ LVL_04 ]

Family Plus

Plus for the whole household, one bill.

$10/mo
  • ›Everything in Plus
  • ›Up to 5 family members
  • ›Owner-managed invites
  • ›Per-member vault isolation
  • ›Shared plan billing
Get Family Plus
[ LVL_05 ]

Family Pro

Pro for the whole household, one bill.

$19/mo
  • ›Everything in Pro
  • ›Up to 5 family members
  • ›Owner-managed invites
  • ›Per-member vault isolation
Get Family Pro
[ Compare // the field ]

How SPCTR stacks up

Every manager here encrypts your vault. The difference is what happens around it — aliases, recovery, and whether the code can be read.

CapabilitySPCTR1PasswordBitwardenDashlaneProton PassNordPass
Zero-knowledge encryption●●●●●●
Open-source client●—●—●—
Built-in email aliases●◐——●◐
Reply from an alias●———●—
Unlock vault with a passkey●◐◐◐——
Passkey step-up after email login●—————
Offline recovery phrase●—————
Live activity & network stream●—————
Daily security tip, tuned to you●—————
Argon2id key derivation●—●—●◐
Breach monitoring●●●●●●
Built-in TOTP codes●●◐●●●
Secure notes & key storage●●●●●●
Family plan$9.99/mo$7.99/mo$3.33/mo$7.49/mo$4.99/mo$3.69/mo
Free tier device limitUnlimitedTrial onlyUnlimited1 deviceUnlimitedUnlimited
Company can reset your vault———◐——
● Yes / fully supported◐ Partial or limited— Not available

Compiled from each provider's public plan and documentation pages. Competitors ship features constantly — check their current pages before deciding. Trademarks belong to their respective owners.

See tiers and full FAQ →
[ Enterprise // governed access ]

Credential security for the whole organization.

License packs from 10 to 100 users, Microsoft Entra sign-in, and central offboarding—without folding employee vault ownership into the company account.

[ Product transparency // full changelog ]

Every version, in the open.

Scroll the complete release history — 61 versions from launch to today.

changelog · 0.7.0 latest
2026.09.110.7.0[feature]
Extension v0.7.0 — clearer free plan
2026.09.04v3.0[feature]
Paid plans are live
2026.09.020.6.9[feature]
Extension v0.6.9
2026.09.02v0.6.8[feature]
Site logos across the vault
2026.09.010.6.7[feature]
Extension v0.6.7
2026.08.27v0.6.6[fix]
Extension v0.6.6
2026.08.26v0.6.5[fix]
Extension v0.6.5 — autofill icon cleanup
2026.08.25v0.6.4[fix]
Extension v0.6.4 — durable sessions
2026.08.24v0.6.3[fix]
Extension v0.6.3 — update transparency
2026.08.21v0.6.2[feature]
Extension v0.6.2
2026.08.21v0.6.1[fix]
Extension v0.6.1 — theme, auto-lock and pairing fixes
2026.08.18v0.6.0[feature]
Extension v0.6.0 — theme sync
2026.08.17v0.5.9[feature]
Session timeout controls
2026.08.17v0.5.8[feature]
Extension v0.5.8
2026.08.17v0.5.7[feature]
Extension v0.5.7 — search your one-time codes
2026.08.170.5.6[fix]
Extension v0.5.6
2026.08.170.5.5[fix]
Extension v0.5.5
2026.08.170.5.4[fix]
Extension v0.5.4
2026.08.17v2.55[feature]
Enterprise license packs
2026.08.17v2.54[fix]
Extension v0.5.3
2026.08.14v2.53[security]
Public threat model & encrypted backups
2026.08.13v2.52[security]
YubiKey support
2026.08.12v2.51[feature]
Extension v0.5.2
2026.08.11v2.50[feature]
Family Plus & Family Pro
2026.08.10v2.49[feature]
Readability controls
2026.08.09v2.48[feature]
Extension v0.5.1
2026.08.08v2.47[feature]
Extension v0.5.0 — passkey provider
2026.08.07v2.46[feature]
Extension v0.4.3
2026.08.06v2.45[feature]
Extension v0.4.1
2026.08.05v2.44[feature]
Family plan
2026.08.05v2.42[security]
Argon2id key hardening
2026.08.03v2.43[feature]
Item types in the vault
2026.08.03v2.40[feature]
Extension v0.4.0
2026.08.02v2.38[feature]
Mobile app shell
2026.07.28v2.32[feature]
Support portal & ticketing
2026.07.27v2.31[security]
Email delivery fix
2026.07.25v2.30[feature]
Reply from your mask
2026.07.22v2.28[launch]
Dynamic web experience
2026.07.20v2.27[feature]
Custom mask names
2026.07.18v2.26[beta]
Beta invite & activation workflow
2026.07.16v2.24[security]
Passkey vault recovery
2026.07.13v2.22[feature]
Confirmation email polish
2026.07.12v2.20[feature]
Plain-language interface
2026.07.11v2.19[feature]
Extension autofill
2026.07.09v2.17[security]
Real breach checks
2026.07.07v2.15[feature]
Tool hub redesign
2026.07.05v2.13[feature]
Mobile layout pass
2026.07.02v2.11[security]
Codebase security audit
2026.06.19v2.08[feature]
Theme system
2026.06.15v2.05[security]
Passkey support
2026.06.11v2.02[security]
Passwordless sign-in
2026.06.07v2.00[launch]
Cross-browser extension
2026.05.05v1.80[feature]
Vault import
2026.04.21v1.70[security]
Mask relay hardening
2026.04.07v1.60[security]
Login alerts
2026.03.24v1.50[feature]
Account tiers and billing
2026.03.10v1.40[security]
Breach monitoring
2026.02.25v1.30[feature]
Email masks
2026.02.11v1.20[feature]
Two-factor code generator
2026.01.28v1.10[security]
Encrypted vault sync
2026.01.14v1.00[launch]
SPCTR launch
Open full deploy log →
[ Ready // start free ]

Put every credential—and your real identity—out of reach.

Open your zero-knowledge vault in the browser, then carry it into Chrome or Firefox. No credit card required.