Overview

Native on every platform.

Windows
LogHistory, undo, and restore
macOS
Vault homeVaults, items, and recent activity
iOS
SyncPaired with two computers

Every app runs the same Rust-based 9Core engine. Each vault is its own infinite encrypted container and syncs directly from device to device without relying on cloud servers.

Vaultlight

Ctrl+; to summon. Ctrl+1–0 to paste.

Windows
Vaultlight item listSearch results and quick actions
macOS
Vaultlight item detailsFields, shortcuts, and continuation
  • Search every unlocked vault by item title, type, field label, or non-secret field value.
  • Search never decrypts concealed fields, and field retrieval decrypts only the selected item.
  • Open an item or copy its username, password, or another field directly from the result.
  • Use the desktop palette from a global shortcut without switching away from your current task.
  • Create a Login from the palette or continue into 9Secure for every other item type.

Sync

Sync directly between trusted devices.

  • Pair devices once and verify the connection with a six-digit security check.
  • Manage which vaults sync to each device.
  • Sync device to device over any available connection with mutual authentication and end-to-end encryption.
  • Merge changes field by field so edits made on different devices converge deterministically.
  • Remove a vault from one device without deleting it everywhere, or explicitly delete it across synced devices.

Sentinel

Know which credentials need attention.

  • Identify weak, predictable, reused, old, and compromised passwords.
  • Check password strength locally with pattern and entropy analysis.
  • Check known breaches by sending only a five-character hash prefix to Have I Been Pwned and matching the results locally.
  • Cache audit results inside the encrypted vault index for fast, offline access.

Security

Built for the post-quantum world.

9Secure 1Password Bitwarden Proton Pass
Argon2id
HKDF-SHA256
XChaCha20-Poly1305
HMAC-SHA256
ML-KEM (FIPS 203)
ML-DSA (FIPS 204)
CSPRNG password generation
Source-available cryptography
  • 9Secure uses the latest NIST-approved post-quantum standards.
  • The Rust-based 9Core engine controls every vault operation, from storage and history to synchronization and key lifecycle, and is backed by source-available Quantum Crypto.
  • Unlocking decrypts only the searchable index. Every item and attachment remains independently authenticated, secrets decrypt only on demand, and transient values are wiped after use.
  • Every sync session uses post-quantum key exchange, mutual device authentication, and end-to-end encrypted state transfer.
  • Each vault uses authenticated append-only commits to preserve its last valid state. Independent records isolate damage, and VACUUM rebuilds the canonical vault without modifying it in place.