Zero-knowledge password manager · South Africa
Passwords, files and ID documents, encrypted in your browser before they reach us. We store only ciphertext, so nobody but you can read your vault. Not even us.
From R60/month · Cancel any time · Hosted in South Africa
01 / How it works
What does zero-knowledge mean? Zero-knowledge means the service that stores your data has no way to read it. Your master password never leaves your device: it derives the key that encrypts your vault inside your browser, and only the encrypted result is uploaded. If our servers were breached, an attacker would get ciphertext and nothing else.
Your master password runs through PBKDF2-SHA256 for 250,000 rounds in your browser to derive your key. The password itself is never sent to us or stored anywhere.
PBKDF2-SHA256 · 250,000 roundsPasswords, notes, files and documents are sealed with AES-256-GCM, which also detects tampering. Each file gets its own key, wrapped by yours.
AES-256-GCM · per-file keysOur servers hold encrypted bytes in South Africa. Without your master password nobody can read them: not us, not an attacker, not anyone.
Hosted in South Africa02 / Everything in one vault
Every plan includes every security feature. Bigger plans add more sharing, longer password history and larger files.
Store every login with a strong-password generator built in, and keep your authenticator codes next to the account they protect.
See weak, reused and old passwords at a glance. Breach checks use HaveIBeenPwned’s k-anonymity range search, so your password never leaves your device.
Keep passports, licences and contracts alongside your passwords, preview them in the browser, and get a reminder before a document expires.
Send a password, note or file through a link that self-destructs after one view. The decryption key travels in the link itself and never reaches our servers.
One subscription for up to five people with 500 GB of pooled storage, a shared family vault, and private vaults that stay private.
Name a trusted contact who can request your vault if something happens to you. You choose a waiting period of 1 to 30 days and can decline at any time.
Lock your account behind an authenticator app or a FIDO2 security key, keep a one-time recovery code offline, and let the vault lock itself when you walk away.
Import from Bitwarden, LastPass, 1Password or any CSV. Export whenever you like, as an encrypted file or plain CSV. No lock-in.
03 / For teams & business
Shared collections that only the right people can open, roles, an audit log and enforced two-factor, so passwords stop living in chats and spreadsheets.
04 / Pricing in rand
Personal plans from R60 a month, Family for five at R450, and per-user pricing for teams. Start free and cancel any time before your trial ends.
For one person getting started
R60/month
25 GB encrypted storage
For one person with lots of documents
R80/month
50 GB encrypted storage
For one person with large files
R160/month
120 GB encrypted storage
For up to 5 people
R450/month
500 GB pooled encrypted storage · 5 people
For small teams sharing credentials
R75/user/month
From 3 users · 10 GB pooled per user
For companies that need control
R130/user/month
From 10 users · 25 GB pooled per user
05 / Compare
Browser password saving is convenient. Here is what a dedicated zero-knowledge vault adds.
| Capability | The Secrets Vault | Browser-saved passwords | Spreadsheet or notes app |
|---|---|---|---|
| Encrypted on your device before upload | Yes, always | Depends on browser & settings | No |
| Provider can read your data | No, zero-knowledge | Depends on settings | Usually yes |
| Encrypted files & ID documents | Yes, with expiry reminders | No | No |
| View-once sharing links | Yes | No | No |
| Breach & reuse checks | Yes | Some browsers | No |
| Emergency access for family | Yes | No | No |
| Works in any browser | Yes | Only that browser | Yes |
| Priced in rand, hosted in South Africa | Yes | No | Varies |
06 / Questions
Something else? Email support@thesecretsvault.com.
A password manager that encrypts your data on your own device before it is stored, using a key only you hold. The provider keeps the encrypted result but has no way to decrypt it. The Secrets Vault works this way: we store ciphertext, never your passwords.
No. Your vault is encrypted in your browser with AES-256-GCM before it reaches us, using a key derived from a master password we never receive. We only ever store ciphertext, so we are architecturally unable to read your secrets. So is anyone who breaks into our servers.
Personal plans cost R60 a month for 25 GB, R80 for 50 GB and R160 for 120 GB. Family is R450 a month for up to five people sharing 500 GB. Teams is R75 per user a month (minimum 3) and Business R130 per user (minimum 10). Every plan includes every security feature; bigger plans add more sharing, longer password history and larger files.
Yes. Personal and Family plans include a 7-day free trial and Teams and Business a 14-day trial. A card is needed to start, you are not charged until the trial ends, and you can cancel any time before then.
Use the one-time recovery code you were given at sign-up to get back in. You can also name a trusted emergency contact, and Business organisations can opt in to admin-assisted recovery. Without any of these we cannot reset it. That is the trade-off for true zero-knowledge security.
In South Africa, on Amazon Web Services. What is stored there is encrypted before it leaves your device. We process personal information in line with POPIA; see our privacy policy for details.
Yes. Import an export from Bitwarden, LastPass, 1Password or any CSV file in a few minutes. You can also export your own vault at any time, as an encrypted file or a CSV that most password managers accept.
Yes. Family gives up to five people a shared family vault plus their own private vaults. Teams and Business add shared collections with per-collection access, roles and an audit log. For one-off sharing, view-once links self-destruct after a single view.
Cancel any time from your account. You keep access until the end of the period you have paid for, and your encrypted data is kept for 12 months in case you come back. You can also delete your account and data permanently.
Through PayFast, a South African payment gateway. Card details go straight to PayFast; we never see or store them. Prices are in rand, so there are no currency conversion fees on South African cards.
Free for 7 days. Encrypted from the first keystroke. Cancel any time.