YOUR IDENTITY
IS GHOSTED.
Watch it work → encrypted vault, rotating 2-factor codes, throwaway email addresses, and a breach alarm. Nothing is unscrambled off your device.
In plain English: SPCTR is a password manager that also hides your real email and warns you the moment your info shows up in a leak — and we literally can't read any of it.
- github.comghost@spctr.io••••••••98% strong
- stripe.coms2.masked.4c1a@spctr.mail••••••••100% strong
- notion.soops+notion@spctr.mail••••••••92% strong
- figma.comdesign@spctr.mail••••••••95% strong
- vercel.comdeploy@spctr.mail••••••••100% strong
- 1password.com—••••••••unset
- ›[SYNC]blob_2f91 ← encrypted · 482ms
- ›[MASK]generated s2.4c1a@spctr.mail for stripe.com
- ›[HIBP]checked 27 aliases · 0 breaches
- ›[TOTP]seed rotated · github.com
- ›[GHOST]session bound to device_S2
Everything you need
to disappear online.
Four tools, one login. Each one is written so it works even if our servers go dark.
Password Vault
Stores every password behind one master phrase you set. We only ever see a scrambled blob — the real thing is decoded on your device.
2-Factor Codes
The 6-digit codes that refresh every 30 seconds — right inside SPCTR. No separate Authenticator app to juggle.
Email Masks
Get a fake @spctrmail.com address for every sign-up. Mail forwards to your real inbox — kill the mask any time and the spam stops.
Breach Alarm
We check your emails and passwords against known leaks. If yours show up, you'll know within seconds — not months.
Choose your tier.
Free
Everything you need to disappear online.
- ›Password generator
- ›TOTP authenticator (5 codes)
- ›3 email masks
- ›Breach checking
- ›1 device sync
Plus
For people who take privacy seriously.
- ›Unlimited TOTP codes
- ›Unlimited masks
- ›Passkeys & vault sync
- ›5 devices
- ›Priority breach alerts
Pro
Zero-knowledge suite for pros and teams.
- ›Everything in Plus
- ›Unlimited devices
- ›Browser extension pro
- ›API access
- ›Priority support
- ›Founder lifetime eligibility
Every version, in the open.
Scroll the complete release history — 27 versions from launch to today.
Fixed outgoing beta and alert emails and published the complete scrollable changelog.
Replies to forwarded mail now leave from your mask address, and forwarded mail carries a mask banner.
Rebuilt marketing and app shell on a modern stack. Same zero-knowledge core.
Plus, Pro, and beta members choose their own mask name; free accounts stay randomly generated.
Per-code beta durations, grace periods, and hardened redemption.
Fail-safe recovery: prove ownership with a passkey to start a fresh vault if a passphrase is lost.
Cleaner beta confirmation email + copy pass.
Every screen now pairs its technical label with a one-line plain-English explanation.
Extension v0.2 fills saved logins, masks, and generated passwords straight into sign-in forms.
Shield now scans saved logins and any address you enter against live breach data.
Vault, Masks, 2FA, and Shield became tappable cards with a live activity log.
Rebuilt navigation and tool cards so everything fits the screen on phones without zooming.
Full audit pass — no findings above informational.
Five interface themes, saved to your profile and applied on every device you sign in from.
Register passkeys per device and sign in with Face ID, Touch ID, or a security key.
Magic links and passkeys replace passwords for account access. Vault unlock stays local.
SPCTR extension for Chrome, Firefox, and Safari.
Internal operations dashboard for user, mask, and billing oversight.
Bring in credentials from other password managers via CSV and JSON, parsed and encrypted on your device.
Inbound mask forwarding moved to a verified sending domain with abuse controls.
Email notifications for new device sign-ins and unusual login locations.
Free, Plus, and Pro tiers with self-serve upgrades and billing management.
Breach alarm checks your addresses against public breach data and flags exposed accounts.
Throwaway addresses on spctrmail.com that forward to your real inbox and can be shut off any time.
Built-in rotating 2FA codes so authenticator codes live beside their logins.
Vault entries sync as opaque encrypted blobs. The server never sees plaintext or your passphrase.
First public release: zero-knowledge password vault with local encryption and encrypted cloud sync.