HedHog Vaults

HedHog Vaults is HedHog's vault application. It stores passwords, cards, notes, keys, and attachments with end-to-end encryption and connects to your company's own HedHog server.

WE DON'T HAVE OUR OWN CLOUD

The application doesn't have its own server. You enter the HedHog installation address on the first screen, and it only communicates with that address. Whoever operates that server decides what is stored and for how long.

TRUST-FREE ENCRYPTION

The content is encrypted on your device with AES-256-GCM before leaving it. The key is derived with Argon2id from your master password and never leaves the device. The server stores ciphertext and cannot be opened.

WHAT YOU CAN DO

• Create vaults and organize secrets by type: login, card, note, API key, server, and others

• Generate strong passwords and check the health of the ones you already use

• Save two-step verification codes (TOTP), read by QR Code

• Attach files, encrypted with your own key

• Share a vault with colleagues, change each person's permissions, and revoke access by changing the key

• Import your passwords from a CSV file

• Check who opened and who changed each item

MADE FOR A MOBILE PHONE

Biometric unlock, automatic lock when the app goes out of focus, screenshot lock, and hidden preview in the task selector. System backup is disabled, so nothing the app saves is copied outside the device.

WORKS WITHOUT INTERNET

Downloaded vaults remain readable without a connection, from an encrypted copy on the device itself. Changes are accepted again when the connection returns.

PRIVACY

None of the contents of your vaults are sent to us. The application only sends failure reports, without name, email, or content — and you can turn them off in Settings.

HedHog Vaults requires a HedHog installation with the vault module. Talk to your company administrator if you don't know the server address.