Vault Solo
The vault on its own, if you want nothing else from the stack yet.
- Unlimited items
- Passkeys & TOTP
- Breach & reuse alerts
- All devices
04 · VAULTPassword Vault — waitlist openA vault we
A vault we
can't open either.
Everything is encrypted before it leaves your device with a key derived from your master password. If we were breached tomorrow an attacker would walk away with noise — and your logins come bundled with the rest of the stack.
ION VAULT · 48 ITEMSENCRYPTED ON DEVICE
- bank.example9f2c 44e1 b708 21daSTRONG
- mail.ice.ioc081 7ee9 30ab 5f14STRONG
- shop.example4a77 e2c0 91bd 6e38REUSED
- social.exampleb3e5 08cf 27ae d509ROTATED
- work.example1d5a b6e9 7f03 c412PASSKEY
- cloud.examplee77b 2a90 55d1 8ce6STRONG
HEALTH82%
0KEYS ON OUR SERVERS
XChaCha20-256AUTHENTICATED ENCRYPTION
19BCREDENTIALS IN BREACH INDEX
$0EXTRA — IT'S IN THE BUNDLE
[ THE UNCOMFORTABLE PART ]
Most password managers can technically open your vault
Not that they do. But architecture beats intent: if the key derivation happens anywhere but your device, or the master password ever reaches a server, then a breach, a court order or a bad hire is enough. Password managers have been breached — and when it happened, the vaults went with them.
REUSED
The average person reuses one password across 14 accounts. One breach unlocks all of them.
EXFILTRATED
Encrypted vault archives have been stolen wholesale, then attacked offline at leisure.
WEAK KDF
Old iteration counts turn "encrypted" into "brute-forceable on rented hardware".
METADATA
Even sealed vaults often leak which sites you hold accounts on.
IF OUR DATABASE LEAKED TOMORROW● SIMULATED
# row 41,208 — full record
user_id 0x7f3a…c19d
blob 9f2c44e1b70821da4a77e2c091bd
blob c0817ee930ab5f14b3e508cf27ae
kdf argon2id · m=64MiB t=3
key — not present —
sites — not present —No key to steal — it is derived on your device, from a password we never receive
No site list — even the names of services you use are inside the sealed blob
Argon2id, memory-hard — offline brute force is priced out, not merely slowed
[ ARCHITECTURE ]
Four steps, and your password never leaves step one
This is the whole design. There is no branch where a server sees a secret, because there is no server-side key at all.
- 01 · YOUR DEVICE
Master password typed
It exists in memory on your machine for a moment and is never transmitted, never logged, never recoverable by us.
- 02 · KEY DERIVATION
Argon2id does the work
A memory-hard function turns the password into a key, locally. Tuned so guessing costs real money per attempt.
- 03 · SEALED
Every field encrypted
Site names, usernames, notes, TOTP seeds — all of it inside one authenticated blob. Nothing is stored alongside in the clear.
- 04 · OUR SERVERS
We store noise
Sync moves opaque blobs between your own devices. We can tell you have a vault. We cannot tell you anything about it.
[ WHAT YOU GET ]
Everything a password manager should have done
BREACH & REUSE ALERTS
Told the moment a saved login is exposed
Your vault is checked continuously against 19 billion leaked credentials — using a private set intersection, so we learn nothing about what you hold. When something appears, you get a notification with the affected site and a one-tap rotation.
Breach monitoring — the moment a site you use is in a dump, not months later
Reuse detection — every place the same password is doing double duty
One-tap rotation — generate, save and submit the new password in one flow
VAULT HEALTH3 ITEMS NEED ATTENTION
shop.example appeared in a breach
Disclosed 4 hours ago · 2.1M accounts · your password was reused on two other sites.
Strong & unique45 items
Reused2 items
Weak1 item
PASSKEYS, TOTP AND THE REST
One place for every secret, not just passwords
Passkeys sync end-to-end encrypted across your devices. Two-factor codes live next to the login they belong to. Cards, addresses, recovery phrases and secure notes sit in the same sealed blob — so there is nothing left over in a notes app or a screenshot.
Passkey support — with sync you control, not a platform vendor's cloud
Built-in TOTP — the code and the login unlock together, autofilled
Emergency access — a trusted contact, on a delay you set, if the worst happens
GENERATOR128 BITS OF ENTROPY
STRENGTHCENTURIES TO CRACK
Passkeyssupported
TOTP codesbuilt in
Secure notesunlimited
Cards & IDsincluded
INCLUDED, NOT UPSOLD
The fourth subscription you don't have to buy
A password manager is not a business on its own — it is table stakes for using the internet safely. So it ships with the stack rather than beside it: no separate plan, no per-seat surprise, no feature held back for a higher tier.
Every feature on every plan — nothing gated behind "Premium"
Autofills through ION Browser — and through Chrome, Safari and Firefox too
Export whenever — an encrypted archive you can import elsewhere
WHAT THIS NORMALLY COSTSPER MONTH
Password manager$3 – $5
VPN$6 – $13
Private email$4 – $8
Residential proxies$8 – $15 / GB
All six, one account$9
[ COMPARE ]
Where your secrets actually live
| Feature comparison | Browser built-in | Mainstream manager | ION Vault |
|---|---|---|---|
| Key derivation | Tied to your account | On device, usually | On device, Argon2id |
| Site names encrypted | No | Often not | Yes, inside the blob |
| Breach monitoring | Basic | Paid tier | Included, private lookup |
| Passkeys | Platform-locked | Varies | Portable, E2E synced |
| TOTP built in | No | Paid tier | Included |
| Works outside its browser | No | Yes | Yes, everywhere |
| Price | Free, with a catch | $3–5 / mo | $0 — in the bundle |
[ SWITCHING ]
Import in one step, from anywhere
Encrypted export in, sealed to your key on arrival, folders and tags preserved. The old file is shredded from disk when the import completes.
- 1Password
- Bitwarden
- LastPass
- Dashlane
- Keeper
- CSV
[ PRICING ]
The vault is never the line item
It comes with every paid plan, in full. Join the waitlist before launch and the plan itself is half price for twelve months.
50% OFF · WAITLIST OPEN
The Stack
All six products on one account — vault, VPN, mail, browser, proxies and agent access.
- Vault included in full
- Emergency access contacts
- VPN + Mail + Browser
- Custom mail domain
- 5 GB of proxy traffic monthly
Household
Six people, six private vaults, and shared collections for the things everyone needs.
- 6 private vaults
- Shared collections
- Everything in The Stack
- One bill, no per-seat maths
30-day refund · Encrypted export on demand
[ FAQ ]
Questions people actually ask
You recover with a phrase generated at setup that you store somewhere physical. If both are gone, the vault stays sealed — from you and from us equally. We would rather tell you that plainly than offer a reset that quietly proves we could have opened it all along.
Private set intersection. Your device sends a blinded fragment of each hash, gets back the matching slice of the index, and does the comparison locally. We learn neither which credentials you hold nor which ones matched — the result never leaves your machine.
Yes. There are native apps for macOS, Windows, Linux, iOS and Android, plus extensions for Chrome, Safari, Firefox and Edge. Autofill, passkeys and TOTP work the same everywhere.
An account identifier, a sealed blob, and the parameters needed to derive your key on your own device — the Argon2id settings and a salt. Not the key, not the site names, not the item count in any meaningful form. Sync is blob replication and nothing more.
Export an encrypted archive or a standard file any time and import it into another manager. There is no retention period and no export fee — your data was always yours, and it was never readable by us in the first place.
Household covers six people with private vaults plus shared collections for the Wi-Fi password and the streaming logins. Shared items are encrypted to each member's key individually, so leaving the household removes access cleanly.
Vault ships alongside ION Browser to the waitlist in join order. Founding pricing on the stack is locked for twelve months from the day you sign up.
[ 04 · VAULT ]
Put every secret somewhere nobody can read it
Founding pricing across all six products, and your pick of @ice.io addresses before they go.
One launch email, no spam