Store data that only you can read.
Your passwords, seed phrases, notes, documents and files, encrypted on your device before anything is sent. Zekke's servers hold no key that opens any of it.
Your recovery phrase is your account: no email, no password. Nobody, including us, can reset or recover it.
- Zero-knowledgeZekke never holds a key that could decrypt your data.
- The phrase is the accountNo email, no password, no account recovery.
- Encrypted before it leavesAES-256-GCM, applied in your browser.
- No ads, no trackingNo cookies either.
The things you cannot afford to lose, or to leak.
Secrets, passwords, notes, documents, spreadsheets and files, with safe sharing. All encrypted before they leave your device.
Secrets
Seed phrases, keys and account numbers: the small values that unlock everything else. Hidden until you ask for them.
Passwords
Sites, usernames and passwords, saved and filled by the browser extension.
Notes
Short text for quick thoughts and private details, kept in tabs.
Documents and spreadsheets
Write long-form text in a rich text editor and have it sync across your devices as you type, encrypted end to end. The server stores and forwards sealed changes and merges nothing. Encrypted spreadsheets sync across your devices too.
Drive and safe sharing
Upload any file into folders, with a Trash that keeps deleted items for a while. Send an item or file to another Zekke user, and the server relays a blob it cannot open.
Your device does the sealing. The server only holds the result.
- 1
Your browser makes a phrase
It generates a 12- or 24-word BIP39 recovery phrase on your device. Your account address and root keys are derived from it locally. Nothing is sent.
- 2
Every item gets its own key
Each item key is random and generated on your device. It is wrapped under a random key for that kind of data, and that key is wrapped to your phrase and to each device that holds it.
- 3
The server gets a sealed blob
Plus the little that routing needs: its size and when it changed. No master key, no recovery database, no support tool that can open a vault.
- 4
Type the phrase anywhere
Typing the phrase in a new browser enrols it as a device and restores the whole vault. Each device has its own keys and its own 6-digit device PIN, which unlocks them.
On your device
- Recovery phrase: the only root key
- The phrase itself is never stored on a device
- One random key per item, wrapped to the phrase and to each of your devices
- Encryption happens here, before anything is sent
On the Zekke server
- Sees: a sealed blob, its size, when it changed, how many devices you have, and who you are connected to
- Does not have: a master key or a recovery database
- Cannot do: open a vault, not even with a support tool
Zero-knowledge by construction, not by policy.
Zekke cannot read your data, even under legal compulsion, because it never holds a key that could decrypt it.
Standard mode
RecommendedThe recovery phrase alone protects the account, and each device has its own 6-digit device PIN. The server counts every guess without ever seeing the PIN. After ten wrong tries, that device forgets the account until you type your phrase again. You can upgrade to Paranoid at any time, from Settings.
Best for: most people. It is the default and the recommended choice.
Paranoid mode
Two factorsTwo things protect the account: your recovery phrase and a 6-digit account PIN. Adding a device with your phrase, removing devices and deleting the account all need the account PIN, so a stolen phrase cannot do any of them. Paranoid cannot be turned off, and a forgotten account PIN ends the account.
Best for: people who fear their phrase being found or copied, and accept the risk of forgetting the account PIN.
Lose the phrase, lose the vault.
Nobody, including Zekke, can restore access. You verify your copy of the phrase at sign-up and receive a printable recovery kit. A lost device is different: remove it from another device or with your phrase, and the keys it held are rotated.
Post-quantum where it counts
Data at rest uses AES-256-GCM, which is considered resistant to known quantum attacks. Sharing between accounts uses PQXDH, a hybrid of X25519 and ML-KEM-768, so an attacker must break both a classical and a post-quantum algorithm.
The cryptography, named.
Every algorithm and parameter, so you can check the claims instead of trusting them.
- Symmetric encryption
- AES-256-GCM
- Classic key exchange
- X25519 (ECDH)
- Post-quantum KEM
- ML-KEM-768 (FIPS 203), for sharing
- Hybrid protocol
- PQXDH (X25519 + ML-KEM-768), for sharing
- Key derivation
- BIP39 (PBKDF2-HMAC-SHA512, 2048 iterations) → SLIP-0010 P-256
- Authentication
- ECDSA P-256 signature over a fresh, timestamped, single-use challenge; no secret is transmitted
- PIN rationing
- OPRF (RFC 9497, ristretto255-SHA512): the server counts guesses and never sees either PIN
- PIN derivation
- Argon2id (64 MiB, t=3, p=1), client-side
Free to start. Paid plans add storage.
- A free tier with 500 MB of storage.
- Paid plans add storage. Final prices are not published yet.
- No ads, no tracking, no cookies.
Join the waitlist
Waitlist members get 50% off premium subscriptions during the first month after launch.
This site collects only your email address, for the waitlist. See the privacy policy.
Where Zekke is, and what comes next.
- September 2026Live now
Staging
Secrets, passwords, notes, documents, spreadsheets, Drive and safe sharing all work today, in Standard and Paranoid mode.
Try it at test-app.zekke.io - Next
Coming next
Calendar and To-do, a public inbox link anyone can use to send you files without an account, a Gallery for photos and videos, and a space for official papers like your passport and contracts.
- 2027
Production launch
No date yet.
Generate your phrase. Keep it safe. That is the whole account.
Staging is open. Create a free account with 500 MB of encrypted storage: no email, no password.