NettForge's safety doesn't rest on a privacy policy or a promise to behave. It rests on cryptography that runs on your device — and a design where any server only ever holds locked boxes it cannot open.
Your master password makes the key on your device. We never receive it, never store it, and could never recover it. There is nothing readable on our side to leak.
AES-256-GCM with a fresh random IV for every item, and a key made with Argon2id (64 MiB · t=3 · p=4) over a random salt. Older accounts use PBKDF2 with 600,000 rounds.
Every item is locked before it leaves your device, so our server only ever keeps locked boxes. The proof you use to sign in is kept apart from your key and cannot open anything.
Every item in your vault is sealed on its own, on your device, before anything is sent. Your key never touches the disk or the network, only the locked boxes do, and they mean nothing without your master password.
Strong encryption is the start. These are the other locks around it.
The web vault sends a strict Content Security Policy: the browser will only run NettForge's own code. Even if someone slipped something onto the page, it would not run.
The Windows app only installs an update that carries our Ed25519 digital signature and whose SHA-256 fingerprint matches exactly. The signing key is kept offline.
It only offers logins saved for the website you are on. Its menu runs sealed off from the page, so a site cannot read it, and it refuses to fill into hidden or covered boxes.
To check a password against known leaks, your device sends only the first five characters of a one-way code. The password, and even its full code, never leave your device.
Add 2FA codes or a passkey to your sign-in. See every device on your account and sign any of them out from anywhere.
Every shared folder has its own key, locked to each member's personal key. For IT companies, every client gets its own key too (Client Wall), so one client's techs can never open another's.
They get locked boxes and nothing else. Without your master password, memory-hard Argon2id makes guessing it painfully slow, and a strong master password makes it hopeless.
An attacker would find locked boxes and sign-in proofs that cannot open them. There are no keys on our side to steal, sell or hand over.
Even we can't read your vault. Readable passwords only ever exist in your unlocked session, on your device.
Everything travels over HTTPS and is already encrypted before it is sent. The extension only fills logins saved for the real site, so a look-alike site gets nothing.
Planned security work, shared openly. We will update this page as each one lands. Live uptime is on our status page.
Unlock your vault with a YubiKey or similar, as well as your master password.
A code-signing certificate, so Windows recognises the NettForge installer straight away.
The same zero-knowledge vault, with fingerprint unlock and autofill built in.
No master key but yours. Start forging your vault today, free.
