No one can take it away. Including us.
Your passwords stay on your devices and sync through storage you control. No accounts to lock, no central database to breach, and no middleman reading along.
Why the architecture is the security model.
Most password managers store everyone's vaults in one giant cloud database. If that company gets breached or sold, your passwords are exposed. Baluard works like a personal safe in your home: your passwords stay on your own hardware, so there is no central database to break into.
A Safe in Your Home
Your vault stays on your physical phone and computer, encrypted with a key only you hold. Every entry is padded to identical size so observers cannot guess what is inside.
Keys Exchanged in Person
Your phone and computer pair directly with each other like two people swapping keys face-to-face. No central account, no corporate sign-in, and no company server in the middle.
Sync Through Your Own Notebook
Sync your vault through a private Git repo, your home server, or a USB drive. The remote host sees only scrambled ciphertext. Even a total breach of the sync host exposes zero passwords.
Engineered for sovereignty and longevity.
Built for autonomy, durability, and device-level custody.
Hardware Key Vault Sealing
Enroll a YubiKey or FIDO2 hardware token to seal the entire vault. Even if an adversary extracts your master password, the vault refuses to decrypt without a physical touch on your security key.
- Hardware challenge-response via FIDO2 hmac-secret
- Canary verification validates authentication state without exposing master keys
All 9 Cipher Types + Passkeys
Store logins (with embedded passkeys), cards, identities, SSH keys, bank accounts, driver licenses, passports, secure notes, and code signing keys.
- RFC 6238 compliant integrated TOTP code generator
- Native SSH and code signing key storage with public key export
Spaces & Family Collaboration
Share specific credential collections with family or team members without a central identity provider. Uses cryptographic invite codes and device-to-device grants.
- Phrase-only emergency recovery kit for estate and family continuity
- Role-based access grants: Owner, Admin, Editor, and Viewer
Browser Extension & Autofill
Native browser integration for Firefox, Chrome, and Chromium-based browsers. Autofill credentials, capture new logins, and sign into WebAuthn passkeys directly through local daemon IPC.
- Direct local socket communication with zero cloud telemetry or analytics
- Instant domain matching and one-click TOTP code filling
Git 3-Way Merge Conflict Resolution
Because Baluard is built on Git, concurrent edits on two offline devices never overwrite each other. When divergent changes occur, Baluard lets you inspect and resolve discrepancies field-by-field.
- Preserves divergent offline edits without silent overwrites
- Full commit history preservation for audit and rollback
Scriptable, daemon-backed terminal client.
The `baluard` CLI gives you 35 commands with daemon-first speed and an offline `--direct` fallback. Perfect for dev environments, headless servers, and CI pipelines.
Read the Security White Paper
Baluard publishes its complete cryptographic architecture and threat model. Everything claimed on this site can be verified in public source code and audited directly.
Read the White Paper (Full 13 Sections) →| Vault Cipher | AES-256-GCM (Authenticated) |
| Key Derivation (KDF) | Argon2id (m=64 MiB, t=3, p=2) |
| Asymmetric Sealing | HPKE (RFC 9180, DHKEM-X25519) |
| Commit Integrity | Ed25519 Device Signatures |
| Memory Hygiene | Zeroize on Drop & Lock |
Get Baluard for your platforms.
Stand-alone binaries with cryptographic release checksums. No account creation, no cloud activation.
Prefer system updates via APT or DNF? (Ubuntu, Debian, Fedora) View repository instructions ↓
Install from the official repository to pull updates directly through your system package manager.
curl -fsSL https://baluard.app/repo/baluard-release.asc | sudo gpg --dearmor -o /usr/share/keyrings/baluard-archive-keyring.gpg
echo "deb [signed-by=/usr/share/keyrings/baluard-archive-keyring.gpg] https://baluard.app/repo stable main" | sudo tee /etc/apt/sources.list.d/baluard.list
sudo apt update && sudo apt install baluardsudo tee /etc/yum.repos.d/baluard.repo <<'EOF'
[baluard]
name=Baluard
baseurl=https://baluard.app/repo/rpms
enabled=1
gpgcheck=1
repo_gpgcheck=1
gpgkey=https://baluard.app/repo/baluard-release.asc
EOF
sudo dnf install baluard
Repository signing key fingerprint: 223310EA BF1A B6FE E6BD DF3E 2A53 1D54 E6D7 4804. Always verify this fingerprint before trusting repository imports.
Browser Extensions
MV3 companions that talk directly to the local `baluard-daemon` via native messaging. Strict origin matching, zero remote telemetry.