Skip to the content

The that onlyopens for you

Cartouche is a password manager that encrypts everything on your device, so the server keeps only what it cannot read.

Create an accountSign in

A web app that also runs on Windows, an extension for Chromium browsers and an Android app.

The Cartouche web app showing a fictitious mail login with its username, hidden password and one-time code
The Cartouche Android app in the dark theme, listing a fictitious card, identity, mail login, bank login and Wi-Fi password

Logins, passkeys, one-time codes, cards, identities and notes, in vaults sealed on your device before anything leaves it.

The security report of the Cartouche web app, listing fictitious logins with weak or reused passwords and an insecure website
The web app, which also runs as the Windows app
The Cartouche extension suggesting a fictitious login for the page that is open
The extension for Chromium browsers
The Cartouche Android app showing a fictitious card with its number, expiry date and hidden security code
The Android app
N

Northwind Mail

Personal · Login

Username or email
ada@example.test
Password
quill-Harbor-47-lantern
Website
mail.northwind.example

On your deviceOn the server

{
  "vaultId": "d9f4e64a-1ddc-4f53-b90d-e956960816bb",
  "id": "5d3d56d1-f61a-4f00-bf3b-7a0254f518e8",
  "revision": 3,
  "key": "Ad9aiV0VYvFfEyDrWa7hKeUFuhMHNvEbNGf95h46Tm8XkQAg3KNojsoRy4LX04uBPB6YpIaqQYCvkf-l-IADVl4YWqNkIwl5COc2wT48qLQLqRfCj90Vgpk-yfBg0dWEKhLJWN-wa2ZtsBuEUmZxRPZsAxyPKW1fog",
  "content": "AQakTOY5JNmCTI8isB0YNYCrKetojICeaPFAEBPTKCnhoEZDvkXwb65EgZ6ImD3nfXhVn6CeGrj9pLmLElRy166S9OJa4_taHm3RaMLjEYUWMIkmmm7CFwj3rFw029m0789QCzK2vLQwaT36ZImo8jOkpjdWKx3aloj71SWjmJ_BAYWOdMpVrdCjHohsZEEv88aMCQhNwBL7I9A3TvzZF62SYnKSkenVgBt8d3rDcnRH2ajzeDqhx_0JJK8y9YJFCQff95SzguOkyWaPlfVHEXdf-r7shZbgH8iEmn5VzwoXlYdD804ckGQx87gRfccU9jTccVXrI83CizoEh810G42hJ4kTjF9O-H6HU4yGlcMdwZygofVu3HpD3Wt6CQ0x3AQWiDigO3HHG9BbgW-N0uycbEftYdgCvgdvAWRrH2k3iUjlisODZU5_VDllzUKosb-N80nwAjD4a2fO63vygKGJGW_u82k_q3D4UEspDWnztcrFEdvGoTBjA5047AGUiaYOd2O7prTUUHSBwHG1MYUKKViNEVWOrDqiSiC_K9-HLDV-LbQCLfzzTXNcOn2i_s1h0IYNeNtJ-ebPCZw5OflVe6N5haNxzsabQRu43YC3ulw9gAxGQrbVaX8BUn24HxsSEbgvCaWfvHtJqx2UXToYlB8h2uRO55d5CFUl6-qTm-OF8-8p9dbXhKhgx7FuXu63rOc1RF8a46apdrTSyWFkgmDPzA6mkQkycjdK86drgeE7wuwuCe3p5i170HOAFwWTKJfQm7vd"
}

This record is real. Cartouche’s own code sealed the login on the left with XChaCha20-Poly1305, under a key nobody kept.

Besides the ciphertext, the server sees only the ids, the revision and the padded size.

One vault, four ways in

Cartouche on Android asking which login to fill into a fictitious app called com.example.reader
What it doesDetail
Web app
Vaults with colours, tags, favourites and encrypted filesUp to 25 MB a file
Shares vaults, with security codes to compare firstManager, editor or viewer
Emergency access after a waiting period1 to 30 days
Breach check that sends five characters of a hashOn demand
Windows app
The whole web app in a window of its ownSame code
Copies kept out of clipboard historyCleared in the background
Locks when Windows locks or the computer sleepsAlways on
Extension
Fills a login with one clickExact address only
Saves the logins you submit and the passkeys sites createOnce turned on
Suggests logins under sign-in fieldsIn a frame pages cannot read
Android app
Fills and saves logins in other apps and browsersAsks before unverified apps
Passkeys through Credential ManagerAndroid 14 and later
Encrypted files on itemsUp to 25 MB a file

How your vault opens

  1. First, your master password

    You type it on this device and Cartouche never sends it anywhere. It needs at least 15 characters and has to pass a strength check.

  2. Then Argon2id stretches it

    Argon2id with 64 MiB of memory and 3 passes turns it into your master key, so every guess against a stolen copy of the server’s data costs that work again.

  3. Then the key signs you in

    An Ed25519 key signs a single-use challenge bound to your server’s address. A captured login cannot be replayed, and a phishing server cannot relay it.

  4. Finally, the vault opens

    The server sends your vault still sealed, and only this device can open it. After that it also opens offline, from the encrypted copy kept here.

All items

  • NNorthwind Mailada@example.test
  • HHarbor Bankada.lovelace
  • WWi-Fi at homeHome network

Only you holdthe key

Create your account in the web app and start sealing your passwords.

Sign inCreate an account