U2 Secured Password Vault

Zero-knowledge password vault browser extension

U2 Secured is a zero-knowledge password vault. Your logins are encrypted on your device before they ever reach our servers — we hold ciphertext we cannot read, and your master password never leaves your machine. WHAT IT DOES • Autofill — a mark appears inside the login field. Click it, choose the login, you're in. • Capture — create an account anywhere and U2 offers to save the credentials on the spot. • Generator — strong passwords and passphrases, generated on your device by a Rust/WebAssembly engine and never transmitted. • Auto-lock — the vault key lives only in memory and is wiped once your idle timer runs out. Reopening the vault takes your master password. HOW THE ENCRYPTION WORKS Your master password and email derive a key with Argon2id, entirely on your device. That key encrypts every vault item with AES-256-GCM. Our servers only ever receive ciphertext and a verification hash — never your master password, never your encryption key. If we were breached tomorrow, the attacker would hold data they cannot decrypt. PRIVACY • We do not sell your data, and we do not use it for anything beyond storing your logins and filling them in when you ask. • A password you copy is cleared from the clipboard after 30 seconds. Before clearing, we check the clipboard still holds what we put there — so we never erase something you copied in the meantime. • The inline mark never appears on u2secured.com itself. • No remote code: all JavaScript and WebAssembly ships inside the package. Requires a U2 Secured account — https://u2secured.com