Paid review
Funded by the developer, who could not block publication — and the reviewer was paid the same either way.
aetier
Sep 16, 2026
I looked into VaultKeepR after seeing a lot of discussion about it as an alternative to traditional managers. What makes it different is the architecture. It's built as a zero-knowledge password manager with no email account, no central server. Authentication is via wallet signature, encryption happens locally using Argon2id and XChaCha20-Poly1305, and the encrypted vault is synced via IPFS. The core SDK and Solidity contracts are fully open source on GitHub under MIT, which makes the security claims verifiable. One of the most interesting parts is the recovery system. Instead of a standard password reset, it uses Shamir's Secret Sharing 3-of-5. You distribute fragments to trusted contacts and no single person, including VaultKeepR itself, can reconstruct the vault. Of course there are limitations. The project is still newer than Bitwarden or 1Password, the community is smaller, and the mobile experience is still in active development. Onboarding requires some familiarity with wallets, which may not be ideal for non-technical users. Also there is no account recovery if both master password and recovery fragments are lost. So overall, for anyone looking for a truly decentralized, privacy-first good password manager with verifiable cryptography, VaultKeepR is one of the most compelling options available right now.
VaultKeepR
Bitwarden
1Password
KeePass
Proton Pass
