Password manager for Mac and Windows
Sealed.
Every password for your life, your family and your small company, encrypted on your own computer before it goes anywhere.
In the browser
Fills in. Warns you.
The browser extension saves the logins you type, fills them back with a click and talks only to the Sealkey app on your computer.
- Passkeys stored in Sealkey, approved with Touch ID or Hello
- A warning when you type a password on a look-alike site
- One-time codes (TOTP) next to the login
Password health
Find the weak ones.
Sealkey checks every password and lists the ones to change. Bring your old passwords along in one step.
- Weak, reused, breachedOne list, sorted by what to fix first
- Private breach checkOnly the first five characters of a hash leave your computer
- GeneratorRandom, memorable or a PIN, in the app and the browser
- ImportFrom Chrome, Edge, Brave, Firefox, 1Password, Bitwarden, LastPass and more
Vaults and sharing
One app. Every vault.
Keep personal, family and business passwords apart, and share a whole vault with the people who need it.
- Invite someone by email, then compare a safety code
- Owner, admin, editor and viewer roles
- Removing someone rotates the vault key
- Logins, notes, cards, Wi-Fi, identities, API keys and SSH keys
Share links and email aliases
Share once. Then it's gone.
Send a password to someone without Sealkey. The link is encrypted on your computer, the key stays in the link, and it opens once by default.
- Expires after an hour, a day or a week, up to 10 views
- Hide your email: a random address on relay.sealkey.si for every sign-up
- Turn an alias off and its mail stops
Speed
Instant.
Measured on a Mac with 10,000 items in the vault.
- 1 ms
- to search all 10,000 items
- 130 ms
- to unlock the vault
- 30 s
- until a copied password leaves the clipboard
Encryption
Locked before it leaves.
Your vault is encrypted with two secrets: your master password and a Secret Key that never leaves your devices. The server stores only ciphertext, not even the names of your vaults.
- Post-quantum hybrid keys for shared vaults
- A signed membership log for every vault
- Security keys as a second step when you sign in to sync
- An Emergency Kit you cannot skip at setup
For AI agents
Agents sign in. They never see.
Claude Code, Claude Desktop and Claude in Chrome can use a login or an API key from Sealkey. The value goes straight from Sealkey to the form or the command, never into the model.
- You approve every use with Touch ID or Windows Hello
- The approval shows the exact command, folder and items
- No "always allow": at most 8 hours, for those items only
- Every use is in the agent activity log
Made for AI agents
AI support.
Sealkey has an MCP server built in. Connect it once and your agent can work with your logins and keys, while you keep the last word.
$ claude mcp add --scope user sealkey -- sealkey mcp
The app shows the exact line for your computer. Claude Desktop and Claude in Chrome connect too.
- Sign inFills a login on the page open in Chrome
- Sign upGenerates, saves and fills a new password
- Run with secretsPuts sealkey:// values into a command
- OrganizeMoves, renames and tags items in bulk
- RotateSaves a new secret from a file, unseen
- Per vaultYou choose which vaults agents may use
For Pakt employees
Seal it.
Sealkey is in use at Pakt. Install it, then sign in to sync with your pakt.si Google account.
Version 0.1.33. Signed and notarized for Mac with Apple silicon, an installer for Windows. Updates arrive inside the app. Privacy