
HexaVault
Password manager and personal information vault
I have launched a major upgrade of HexaVault.
The first version was released in 2017 as a standalone mobile app. It stored data locally on the device and had no sync. This new version is a complete rebuild with cloud sync, zero-knowledge end-to-end encryption, categories, built-in TOTP support, and file attachments.
The idea started several years ago when I was running an IT services business. I had to manage a lot of client data and credentials. Not everything was just a username and password. There were server details, API keys, certificates, secrets. Existing tools like LastPass and KeePass felt too limited and focused mostly on logins. Everything else had to be stored as secure notes.
So I built a simple internal tool called InfoBox. It had a notes-like interface with a list of entries on the left and a large text area on the right. I used it to store client and project details, but also personal information like bank accounts, cards, insurance policies, identity documents, and more. I wanted something simple but flexible.
That idea evolved into HexaVault.
At its core, HexaVault stores data as label and value pairs. These are grouped into templates, which are predefined sets of fields. Templates are organized into categories, and users can create their own. You can also attach files to entries. For example, a passport entry can include a scanned copy, or an agreement entry can include the PDF.
All data is encrypted on the client using AES-256-GCM before syncing. The vault password and encryption key never leave the device.
HexaVault is available on web, Android and iOS. Creating an account is free, with no limit on devices and free sync. A Pro plan, priced at $24.99 per year, adds file attachments.
The next step is to add autofill and browser extensions, which will make it more usable as a password manager. But the goal is not just to be a password manager. It is meant to be a secure place to store all important information in life.
About
HexaVault was born from the frustration of using password managers for more than just logins. Anything beyond usernames and passwords is usually treated as an afterthought, buried in generic secure notes.

Comment