Recovery codes are in the safe at home.
Passwords that never leave your devices
A password manager for your Mac, iPhone and Linux computer, with a master password of its own. Your devices keep each other up to date, directly over Bluetooth or through jellysuite, and no server ever holds a copy, not even encrypted.
Your passwords live on your own devices and nowhere else. We never hold a copy of your vault, not even a locked one.
Jelly Vault is a preview
It's not out for everyone yet. Right now it's on for the people trying it with us: in the iPhone app's TestFlight builds, and in the Mac and Linux apps where we've switched it on. It isn't in the browser: a vault lives only in the apps, where its keys never pass through a page our server sends. We'll say here and on the changelog when it's ready for everyone.
Add a device with a code
On the Mac, choose Add a device. Your iPhone scans the QR code it shows; another computer types the six words beside it. The code works once, for five minutes, and only two devices signed in to your account can meet with it.
Sync nearby, even offline
Near each other, your devices sync over Bluetooth, with Wi-Fi and mobile data off if you like, and the iPhone app in the background. Apart, they sync through jellysuite, which passes sealed bytes from one to the other and stores nothing. Nearby only keeps a device off that route. Linux syncs through jellysuite.
Face ID, Touch ID or your master password
The vault has its own master password, apart from your account's, and a 24-word recovery phrase you write down when you make it. On an iPhone with Face ID or a Mac with Touch ID, your face or finger opens it, and the key for that never leaves the device's secure hardware. On Linux, the master password does.
Fills in your logins
On the iPhone, Jelly Vault fills your logins in Safari and in apps, from the suggestion above the keyboard, after Face ID. A Safari extension offers to save a login you type. On the Mac, a browser extension for Chrome and Firefox asks the app for one login at a time, when you click.
Logins and more
Logins with their two-step codes, notes, cards, identities, Wi-Fi networks and SSH keys, each with fields of your own.
Bring your passwords
Import from 1Password, Bitwarden, Apple Passwords, Proton Pass, KeePassXC, Chrome, Firefox, Dashlane or LastPass. The file is read on your device.
Nothing lost in a clash
Change the same password on two devices while they're apart, and when they meet one wins and the other is kept in the item's earlier passwords.
A backup you keep
Save a backup file wherever you like; your master password or recovery phrase opens it. With the vault on one device and no backup for a month, Jelly Vault reminds you.
Erase it from one device
Erase vault on this Mac, or iPhone, takes its copy off that device alone, after your master password. Deleting your account deletes the vault on that device too. On the iPhone, either one also removes logins saved from Safari that were waiting for it.
A window of its own
On a computer the vault opens in its own window, apart from your mail and documents, and locks itself when left alone for 15 minutes.
Not there yet in Jelly Vault
- Passkeys
- Sharing a vault with other people
- Filling logins in Safari on the Mac Chrome and Firefox fill from the Mac app today
- Two-step codes from AutoFill on the iPhone
- Bluetooth sync on Linux Linux syncs through jellysuite
- Windows and Android
Good to know
Jelly Vault lives in the Mac, Linux and iPhone apps, not in the browser: its keys never pass through a page our server sends.
If you lose every device and have no backup, nobody can recover your vault. Not even us.
What we keep of your vault.
Nothing of what's in it. Your vault is only on your devices, and so are its keys (how it works). Here's all that reaches us when your devices sync.
- Logins
- GitHub, Bank and 46 more
- Not on our servers
- Passwords
- ••••••••••••••
- Not on our servers
- Notes and cards
- Door codes, Visa ending 4417
- Not on our servers
- Master password
- Only you know it
- Only in your head
- Recovery phrase
- 24 words
- Only with you
- Vault key
- On your devices
- Not on our servers
- Sync
- Through jellysuite
- That your account uses Jelly Vault, how many of your devices are connected, when they sync and roughly how many bytes. The bytes are sealed, and nothing is stored or logged.visible
- Bluetooth
- Nearby
- Not to us: anyone nearby who scans can tell a device running Jelly Vault is close, not whose or which vaultvisible