Early access is opening soon
Ruvee is a password manager you host yourself. Every item is encrypted on your device before it syncs, and your master password never reaches the server. Not once, not even hashed.
How it works
Choose a master password. Ruvee derives your keys in the browser and gives you a Recovery Kit to keep somewhere safe. We check you saved it before you go on.
Add a laptop, another browser or the extension by approving it from a device you already trust. Each one proves it holds its own key.
Changes sync through your own server as encrypted records. Ruvee verifies every sync and shows a real conflict instead of silently picking a winner.
See for yourself
Flip the switch. On your device you see your logins. Your server holds the exact same data and can make no sense of it.
Personal emailalex.m@example.comtundra-velvet-88-orchidhttps://mail.example.com482 913Backup codes are in the safeDecrypted locally with keys only your devices hold.
Features
Login uses OPAQUE, a protocol where the server checks your password without ever receiving it. Your vault is sealed with libsodium before it leaves the browser. What the server stores is ciphertext and the minimum it needs to route it.
Run it on a VPS or a box at home. Your data never sits on someone else's cloud.
A printable kit restores your vault if you forget your master password. Only you hold it.
Unlock and read your vault with no connection. It catches up the moment you're back.
Keep one-time codes next to the login they belong to, encrypted like everything else.
The Chromium extension pairs like any other device and fills only on the exact origin a login was saved for. A look-alike domain gets nothing.
Honest status
A password manager should earn trust before it asks for your passwords. Here is exactly what exists and what still has to happen.
FAQ
Not yet. Ruvee works, but it has not had an independent security review. Until it does, we ask people to use test data only. Join the waitlist and we'll tell you when that changes.
You run the Ruvee server on a machine you control, like a small VPS or a computer at home. Your encrypted vault lives there, not with us. We're working on making setup a few commands long.
Your Recovery Kit restores access. Without the password or the kit, nobody can open the vault, including whoever runs the server. That is the point.
Most managers also encrypt your vault. Ruvee adds two things: the server never learns your master password, even during login, and you decide which server holds your data.
We store it on our own server to send you early-access news. No trackers, no third parties. Reply to any email from us and we'll delete it.
Early access goes to the waitlist first. One email, when it's ready.