Bastique is a modern, premium vault built to defend your privacy. It keeps your credentials, documents, and files fully encrypted locally on your device, accessible only with one master password that never leaves your mind.
We live in a world where background utilities, network processes, and modern AI agents can easily gain access to directories, plain-text notebooks, and unsecured documents on your machines. Keeping your passwords, credit cards, and confidential details in standard files, notes apps, or spreadsheets is quietly becoming dangerous. Anything readable by you can be easily indexed, scanned, or read by automated programs running in the background.
Bastique is your secure boundary. Built entirely on a strict zero-knowledge architecture, Bastique ensures that even if a background utility or unauthorized software gains physical access to your encrypted vault file on disk, all it sees is meaningless cryptographic noise. Your raw data is decrypted purely inside your system's secure memory only while your vault is unlocked.
All data is encrypted locally using authenticated XChaCha20-Poly1305 AEAD and Argon2id. No master password or encryption key is ever transmitted, stored, or visible to our servers.
Synchronize your macOS, Windows, Linux, and iOS devices into an encrypted group. Powered by E2E zero-knowledge Cloudflare relays. Your keys never leave your vault.
Capture or drop pictures of documents. Bastique uses a local, offline machine learning engine to instantly recognize and copy text into notes. No cloud APIs, no data leaks.
Attach PDFs, scans, and images directly to entries. Each attachment is encrypted with a unique key, decrypted temporarily, and securely wiped (fully overwritten) from disk on closed.
Template support for bank accounts with custom mailcode & ID fields. Auto-detect credit card types, validate card numbers, and verify international IBAN account structures instantly.
Store TOTP authentication secrets to display live rotating 6-digit codes. Protect your screen with adjustable idle autolock and secure clipboard auto-clearing.
Monitor password health locally to identify weak, duplicated, or old keys. Run optional opt-in queries against known breach databases using highly anonymous k-anonymity checks.
Instantly send single credentials or notes securely to colleagues via temporary codes (AV-...) and PINs. The encrypted payload is automatically wiped from relays once picked up.