XChaCha20-Poly1305
Every record is sealed with authenticated encryption and bound to its place in the vault, so nothing can be swapped or altered unnoticed.
Your secrets.
Nowhere but here.
Ciphren is a password manager, private notebook and file safe that lives entirely on your computer. No account. No cloud. No tracking. Just strong encryption in a place that feels good to use.
macOS · Windows · Linux
Offline by design.
Your vault is a single file on your disk. Ciphren never needs a server, so there is no server to breach.
Encrypted before it lands.
Every title, password and note is sealed on your device before anything is written. Even the backups.
Yours to keep.
Encrypted backups you can restore anywhere. Notes export to plain Markdown. No lock-in.
Passwords
Handled with care.
Reveal a password only when you mean to. Copy it and Ciphren clears the clipboard 30 seconds later. Every login shows how strong it really is and remembers what it used to be.
- Generator in its own window, with passphrases
- Websites, custom fields and password history
- Collections, favorites and a trash you can undo
Notes
Notes that think in links.
Write with headings, lists, tasks and code, no syntax required. Type two brackets to link another note, then follow the thread. Every note shows what it links to and what links back.
- Markdown underneath, beautiful on top
- Obsidian-style
[[links]]and backlinks - Import and export plain
.mdfiles
Files
Files that never sit on disk in the clear.
Keep scans, contracts, scripts and books in the vault. Each file is encrypted with its own key and opens only in memory: PDFs, e-books, pictures, video, Markdown, tables and code, right inside Ciphren.
- Drop files on the window, or paste a link to download it into memory first
- Save a web page as a clean, offline copy or as a note
- An unencrypted copy is written only when you choose Export
Speed
Everything, one keystroke away.
Search narrows the list as you type. The command palette reaches every action by name. Arrows, Enter and Escape do exactly what you expect.
- ⌘K command palette
- ⌘F search, ⌘N new login
- Native menus, tray and context menus
Your vault
One file. One key. Yours.
Keep the vault anywhere, even in a folder you already sync. Choose a passphrase and Ciphren shows how long it would take to crack, then tunes its key derivation to your machine.
- Argon2id, tuned per device
- Daily encrypted snapshots, portable backups
- Import from KeePass in one step
Locking
Locked the moment you leave.
Press ⌘L, step away, close the lid or lock the screen: the keys are wiped from memory and the vault file is closed. Your master password opens it again.
- Auto-lock after inactivity
- Locks on sleep and screen lock
- Brute-force lockout with growing delays
Security
Built like a safe.
Not like a website.
Argon2id
Your master password is stretched with a memory-hard function, tuned on your device to make every guess expensive.
Zero knowledge
Ciphren never stores or sends your master password. There is nothing to reset, and nothing anyone else could hand over.
Signed updates
Every update is verified against a key built into the app before it installs, and the vault is locked first.
Memory hygiene
Keys live in locked memory, are kept out of crash dumps, and are wiped the moment the vault locks. Opened files and downloads exist only in memory.
No telemetry
No analytics, no crash reporting, no account. The only optional network request is the update check.
Get Ciphren.
Free. Native on every desktop.
Updates arrive automatically and are signed. Installers are not yet code-signed by Apple or Microsoft, so the first launch may ask you to confirm.