P.S. Vault

P.S. Vault is a self-hosted, zero-knowledge vault app for the things that matter most — passwords, documents, financial records, and private notes — paired with an Emergency Switch that ensures your trusted contacts can access what they need if something happens to you.

You host it. You own it. No cloud vendor holds your keys.

*** P.S. Vault requires access to a self-hosted server. You can find setup instructions and the server software at https://psvault.dev. ***

── VAULT & ENCRYPTION ──

Everything in P.S. Vault is encrypted on your device before it ever leaves it. Your master password is never sent to the server — only you can decrypt your data. Vaults support passwords, secure notes, financial accounts, identity documents, contacts, crypto wallets, SSH keys, server credentials, and more.

── EMERGENCY SWITCH ──

Set a check-in interval — daily, weekly, or longer. If you stop checking in, P.S. Vault sends escalating reminders, then notifies your beneficiaries and grants them access to the vaults you've designated for them. You can abort the process at any time, and trusted contacts can help verify activity on your behalf.

── BENEFICIARY SYSTEM ──

Assign beneficiaries to specific vaults with tiered access (immediate, secondary, tertiary). Each beneficiary receives their own encrypted key — they can never access your vault before the switch triggers, and only the vaults you've explicitly shared with them.

── PRIVACY & SECURITY ──

• Zero-knowledge encryption — XChaCha20-Poly1305 + Argon2id

• Biometric unlock (Face ID, fingerprint)

• Two-factor authentication (TOTP)

• Automatic vault lock with configurable timeout

• Clipboard auto-clear after copy

• No telemetry, no analytics, no third-party data sharing

── SELF-HOSTED ──

P.S. Vault requires your own server running the P.S. Vault backend. Full setup instructions and Docker compose files are available at https://psvault.dev. An HTTPS connection is required.

P.S. Vault is open source.