Why Citadel

One vault instead of five apps

Most people spread their sensitive information across a password manager, an authenticator app, photos of documents in the camera roll, a notes app and old emails. Every copy is one more place it can leak from.

Citadel keeps all of it in one place, encrypted on your device:

• Passwords, with autofill and a built-in password generator
• Verification codes for two-factor authentication, available on all your devices
• IDs and documents: driver licenses, passports, health insurance and Social Security cards
• Debit and credit cards and bank accounts
• Notes and car details
• Attachments, such as photos or scans of your documents

See What you can store for the full list.

Security built on proven standards

Citadel encrypts your vault with AES-256, the encryption standard approved by the U.S. government for protecting top secret information:

• Zero-knowledge encryption. Everything is encrypted on your device with AES-256-GCM before it is synced. Only you can read it.
• Slow, salted key derivation. Your keys are derived from your master password with PBKDF2-HMAC-SHA512 and 650,000 iterations, which makes every password guess expensive.
• Your master password never leaves your device. Sign-in uses the Secure Remote Password (SRP) protocol, so not even a hash of your password is sent to our servers.

Read the full security model.

See how secure your passwords are

Lighthouse, your security dashboard, rates every saved password from Poor to Strong, flags passwords you've reused, and gives your vault an overall security score. It runs entirely on your device.

A free plan you can actually use

The Free plan includes every feature that Premium has: autofill, the password generator, Lighthouse and cloud backup. The only limits are 25 entries and 2 devices. No trial period and no time limit. Compare plans

On all your devices

Citadel runs on iPhone, iPad, Mac and Windows, and keeps your vault in sync between them.

How Citadel compares