Security health
See weak, reused, and old passwords before they become a risk
Health checks run locally, so sensitive credentials do not need to leave your device for routine analysis.
Private by default. Connected by choice.
Your digital life
Your digital life
Yours alone
Keep passwords, documents, payment details, 2FA codes, recovery information, and sensitive files in one private vault. Everything is encrypted locally. Sync and share only when you choose.
$2.99 one-time purchase · Optional Sync for $1.99/month · 14-day Sync trial
Encrypted locally
Relay sees ciphertext only
No Bastique account required
No advertising or tracking
Local authenticated encryption
Relay processes ciphertext only
One private place
Everything sensitive Beautifully organized
Replace scattered notes, screenshots, spreadsheets, and folders with one calm, structured vault built around privacy.
Your everyday vault
Security that feels simple
Bastique keeps the complexity behind the interface. Your credentials, documents, financial details, notes, codes, and attachments remain organized and protected without turning daily use into a security exercise.
Passwords
Documents
2FA codes
Bank details
Secure notes
Attachments
One consistent workspace across desktop and mobile.
Zero-knowledge architecture
The relay delivers
The relay delivers
It never reads
Your data is encrypted before it leaves a trusted device. The relay can move encrypted packages between devices, but it does not receive the keys required to decrypt them.
AES-256-GCM
Argon2id
End-to-end encrypted
10-minute Secure Share expiry
15-day inactive sync expiry
Your device
Encrypts locally
Encrypted payload
Ciphertext only
Bastique relay
Cannot decrypt
Trusted device
Decrypts locally
Built into the vault
More than password storage
Bastique protects the sensitive pieces of everyday digital life that ordinary password managers often leave outside.
Turn documents into searchable text without cloud recognition
Text extraction runs directly on your device.
Keep PDFs, scans, and images protected with the records they belong to
Each attachment is encrypted before it is stored.
Built-in 2FA
Keep rotating authentication codes beside the accounts they protect
Store TOTP secrets in the encrypted vault and access codes without switching between separate apps.
Clear pricing
Own the vault. Subscribe only for the relay
The core app is a one-time purchase. The optional subscription covers the infrastructure used for remote synchronization and one-time encrypted sharing.
Bastique Core
$2.99
one-time
Everything needed for a private local vault.
- Local encrypted vault
- Passwords, documents, and payment information
- Built-in 2FA authenticator
- Local OCR and encrypted attachments
- Backup tools and local security audit
- Free Linux Snap edition with local and nearby-device features
Optional add-on
Bastique Sync
$1.99
per month
Remote encrypted connectivity when your devices are apart.
- Secure remote synchronization
- Relay-assisted device pairing
- One-time encrypted sharing
- 10-minute automatic package expiry
- 14-day free trial
The Linux Snap edition is free and local-only: it does not include the cloud relay, remote Secure Share, or Sync subscription. A limited introductory app promotion may be offered where supported by the marketplace. Prices and availability vary by country, currency, taxes, and store rules.
Questions, answered
Privacy without mystery
What is included in the Linux Snap edition?
The free Linux Snap includes the encrypted local vault and direct nearby-device synchronization and sharing over the local network. It does not connect to the Bastique relay, purchase or restore Bastique Sync, or send remote Secure Share packages.
Does Bastique require an account?
No Bastique account is required for the core local vault. Store purchases and subscriptions are managed through Apple, Google, or Microsoft.
Can Bastique read my synchronized data?
No. Synchronization and sharing payloads are encrypted before leaving your device. The relay receives ciphertext and does not have the keys required to decrypt it.
What happens if I forget my master password?
Your recovery key can be used to restore access. If both the master password and recovery key are lost, the encrypted vault cannot be recovered.
What happens after 12 failed unlock attempts?
Bastique automatically deletes the local encrypted vault from that device after 12 consecutive failed unlock attempts. This protection is mandatory and cannot be disabled.
Does Bastique protect against malware on my device?
If Bastique detects that another program is trying to inspect it — a debugger, an injected library, or a jailbroken or rooted device — it closes immediately, tells you why, and refuses to decrypt. It also locks the moment you leave the app. On a healthy, up-to-date device this keeps your vault protected. Be aware that a device fully controlled by an attacker cannot be secured by any app, so keeping your system clean and current is still essential.
What happens when a Secure Share package expires?
A one-time package is deleted immediately after successful retrieval or automatically after ten minutes, whichever happens first.
Does deleting the app cancel Bastique Sync?
No. Subscriptions must be managed and cancelled through the Apple App Store, Google Play, or Microsoft Store account used for the purchase.
Coming soon
Your private information deserves more than another notes app
Get launch updates and early-access information for Bastique.
Get early access