VaultMesh keeps your vault encrypted on your own devices. Mobile and desktop can pair and sync directly, with no required hub device and no desktop dependency for mobile sync.
VaultMesh is built so mobile and desktop users can share one secure vault without giving up control over keys or plaintext data.
No service can read your vault. Encryption and decryption happen only on your devices, and keys stay local.
Your vault is stored locally in an encrypted database. VaultMesh remains usable even with no network connection.
Argon2id, XChaCha20-Poly1305, X25519, and Ed25519 protect your data with modern, proven primitives.
Sync over local network by default. For remote devices, the relay forwards encrypted payloads without seeing plaintext.
Mobile and desktop devices pair and sync securely without a required hub. Relay is only for cross-network encrypted transport.
Hybrid logical clock and version vectors merge concurrent edits deterministically so data remains consistent.
Extensions connect to the desktop client for secure autofill, keeping sensitive data out of long-term browser storage.
SPAKE2 plus human verification ensures only your trusted physical devices can join your sync domain.
Start on any device you prefer, then pair more trusted devices when you want shared sync.
Install VaultMesh on mobile or desktop, then create your vault with your preferred starting device.
Set your master password and import or add credentials. Data is encrypted before it is written to disk.
Use QR or pairing code between devices, then verify the security string before joining your sync domain.
Continue on mobile and desktop with one encrypted vault. Add browser extension integration when needed.
Desktop, extension, CLI, and relay packages are served from this website. Mobile apps are distributed through app marketplaces.
Mobile sync does not require desktop. Desktop is optional unless you need browser extension integration.
Available via App Store and Google Play. Mobile devices can sync directly without requiring desktop.
Desktop app for desktop usage and optional browser extension bridge.
Browser autofill package. Requires desktop app via native messaging.
For scripts and automation workflows.
Checksums and signatures: downloads/checksums.txt
Infrastructure
Use a relay node for NAT traversal. VaultMesh relay forwards encrypted payloads only and does not read vault plaintext.