Velto Guard

About

VeltoGuard — Zero-Knowledge Password Manager & Secure Vault
Your passwords, encrypted before they ever leave your device. The server sees nothing.

VeltoGuard is a zero-knowledge, client-side-encrypted password manager and secure vault. Every piece of data you store — passwords, secure notes, payment cards, and documents — is encrypted in your browser using AES-256-GCM before it is ever sent to the server. Your master password never touches our servers. Your encryption key never leaves your device.

How It Works
When you create an account, VeltoGuard derives two separate cryptographic keys from your master password entirely in your browser using PBKDF2 (600,000 iterations of SHA-256):

An authentication key — transformed into a hash that is sent to the server for login verification. The server stores only a bcrypt hash of this value.
An encryption key — used to encrypt and decrypt all your vault data. This key is never transmitted, never stored on the server, and never leaves your browser.
This means even if our servers were completely compromised, an attacker would find only bcrypt hashes and AES-256-GCM ciphertext — computationally infeasible to reverse without your master password.

Chrome Extension Features
Autofill — Fast, Automatic, Smart

The VeltoGuard extension automatically detects login forms as you browse the web and fills your saved username and password with a single click. No more copying and pasting. No more typing credentials by hand.

Detects username and password fields on login pages
Matches saved credentials by website URL
Fills fields instantly from the extension popup
Prompts you to save new credentials when you log in to a site not yet in your vault
Payment Card Autofill

VeltoGuard goes beyond passwords. Save your payment cards securely in the vault and let the extension fill card details on checkout pages automatically. Supports standard payment forms as well as advanced embedded payment iframes (including Adyen Secured Fields used by major e-commerce platforms). Card number, expiry, CVV, and cardholder name all fill correctly — even on split-field forms.

Mini-Vault Popup

Access your entire vault directly from the extension popup without opening the full web app. Browse, search, copy, and autofill from anywhere in your browser.

Session Sync — No Second Login

Log in once on the VeltoGuard web app and the extension is automatically authenticated. No separate login, no token entry. Your session is shared securely using a trusted browser messaging channel. The extension will never ask you to log in again if you are already logged in on the web.

Trusted Device Support

Mark your browser as trusted and skip re-entering your master password every time the vault locks. Your encryption key is wrapped with a random device secret stored in your browser — you unlock instantly without sacrificing security.

Vault — Store Everything Securely
Passwords
Store login credentials with username, password, URL, and notes. All fields are encrypted.

Secure Notes
Keep private information — WiFi passwords, PINs, software licences, recovery codes — in fully encrypted text notes. Only you can read them.

Payment Cards
Store card details (cardholder name, card number, expiry, CVV, notes) securely encrypted. Use them with autofill on checkout pages.

Documents (Premium)
Upload and encrypt files directly in your vault. PDFs, images, identity documents — stored as AES-256-GCM encrypted blobs. Up to 1 GiB of document storage included with Premium.

Organisation
Folders
Create folders to organise your vault. Nest folders inside folders for as many levels as you need. Folder names are encrypted — even the names of your categories stay private.

Favorites
Star frequently used items to keep them at hand.

Search
Full-text search across your entire vault. Find any item instantly.

Category Filtering
Filter your vault by item type: passwords, notes, cards, documents.

Security Architecture
AES-256-GCM Encryption
Every vault item is encrypted with AES-256-GCM using a random 12-byte initialisation vector per item. This is the same encryption standard used by banks and governments worldwide.

PBKDF2 — 600,000 Iterations
Key derivation uses 600,000 PBKDF2-SHA-256 iterations. This makes brute-force attacks against your master password computationally expensive even if an attacker has the ciphertext.

bcrypt Authentication
Your login credentials are verified using bcrypt with a cost factor of 12 on the server side. The raw authentication key never enters our systems.

Two-Factor Authentication (2FA)
Add a second layer of protection with TOTP two-factor authentication. Compatible with Google Authenticator, Authy, Microsoft Authenticator, and any RFC 6238-compatible app. Scan a QR code, confirm with a 6-digit code, and your account is protected.

10 one-time backup codes are generated during 2FA setup so you can regain access if you lose your authenticator device.

Account Recovery
If you forget your master password, your vault is not lost. VeltoGuard generates a recovery phrase during registration. Your encryption key is wrapped with a key derived from this phrase and stored on the server as ciphertext — the server never knows the phrase or the key. Enter your recovery phrase and your vault is fully restored, then re-encrypted with your new master password.

Trusted Devices
Trust a browser to skip master password re-entry on subsequent unlocks. A random 32-byte device secret wraps your encryption key locally. If you remove the trust, the wrapped key is deleted.

Auto-Lock
The vault automatically locks after 15 minutes of inactivity on untrusted devices. Your vault key is cleared from memory and cannot be accessed without re-authentication.

Real-Time Sync
Vault changes sync in real time across all your open tabs, devices, and the extension via a WebSocket connection. Open the web app and the extension side by side — they stay perfectly in sync.

Password Tools
Password Generator
Generate strong, random passwords directly in the vault or when saving a new login. Configure length and character sets (uppercase, lowercase, numbers, symbols) and copy to clipboard in one click.

Password Health (Premium)
Audit your saved passwords for security weaknesses:

Weak passwords — flags passwords that are too short, too simple, or easy to guess
Reused passwords — identifies passwords used across multiple sites
Pwned passwords — checks whether your passwords have appeared in known data breaches using the HaveIBeenPwned database
The breach check uses a k-anonymity model: only the first 5 characters of your password's SHA-1 hash are sent to the HIBP API. Your actual password is never transmitted.

Import & Export
Encrypted Export
Create a full encrypted backup of your vault. The backup file is AES-encrypted with your vault key — it cannot be opened without your master password.

Import from Backup
Restore from an encrypted backup file. Decrypted locally in your browser, items are re-imported into your vault.

Free & Premium
Free — Free Forever

Up to 75 vault items
Passwords, secure notes, payment cards
Folder organisation
Two-factor authentication
Account recovery
Chrome extension
Trusted devices
Password generator
7 languages
Real-time sync
Premium

Up to 2,000 vault items
Everything in Free, plus:
Encrypted document storage (up to 1 GiB)
Password health analysis
HIBP breach checking
Privacy & Languages
7 Languages Supported
VeltoGuard is available in English, Spanish, French, Portuguese, Polish, Dutch, and Russian. Switch languages instantly from the language selector in the app and extension.

Privacy by Design
We cannot read your vault. We cannot reset your master password. We cannot hand over your data to anyone because we do not have it. The zero-knowledge architecture is not a marketing claim — it is a technical constraint built into how the encryption works.

How to Get Started
Install the VeltoGuard extension
Visit veltoguard.com and create a free account
Save your recovery phrase securely — this is the only way to recover your vault if you forget your master password
Add your first passwords
The extension will autofill them as you browse
The extension and web app share the same account. Log in on the web app once and the extension authenticates automatically.

VeltoGuard is built for people who take privacy seriously. Your data belongs to you — encrypted, private, and only accessible with your master password.

VeltoGuard requires an account at veltoguard.com. Free tier available with no time limit. Premium subscription available for additional features.