Passwords made safer: local vault + server shield.
Store your vault locally, unlock with a server shield, and move secrets securely using encrypted WQR codes — plaintext never leaves your device.
Less stress, fewer risky moments
WQR is built for real life — device theft, copied files, inspections, leaks, and mistakes.
- You don’t panic about leaks: copied vault files can’t be brute-forced offline at scale because unlock is server-gated.
- You stay in control: your vault stays on your device — not in an unknown place of storage.
- Sharing becomes intentional: send an encrypted WQR when you choose, instead of sending passwords in chat.
- Less “one password breaks everything” fear: optional multiple master passwords reduce blast radius.
- Better protection against “quick access” moments: inspections, phone repair shops, airport checkups, and shoulder-surfing.
- Future-proof: passkeys support means passwords can fade over time without losing the vault concept.
Designed for real-world attacks
QR-native vault storage
Your secrets are stored as encrypted WQR codes — not readable by random QR scanners.
Online-gated unlock
Stolen vault files can’t be attacked offline at scale.
Incident-response security
Emergency shutdown + pepper rotation designed to contain attacks.
A 30-second understanding
Create
You create a secret and it’s encrypted locally.
Shield
When you unlock, the server adds a shield step — without ever seeing plaintext.
Store
It’s stored locally as WQR and can only be unlocked with your master password + server-gated unsealing.
The server can protect you — without being able to read you
Server CAN
- Rate-limit unlock attempts (anti-bruteforce)
- Lock down unlocking during incidents
- Rotate server pepper without disturbing customers
Server CANNOT
- Read plaintext or master passwords
- Store your vault in an unknown place of storage
- Recover your secrets if you forget your master password
Credibility, even while we’re early
A clear way to report security issues.
What we store — and what we don’t.
Know when systems are up.
Independent review and incentives.
Quick answers
- Can I unlock without internet? (Storage yes — unlock no.)
- What happens if the server is down?
- Does plaintext ever leave my device?
- What if someone takes a photo of my WQR code?
- Can I export / migrate out anytime?
More than a password manager
Passwords + documents
Keep logins and sensitive files together in one calm vault.
Passkeys support
Store passkeys too — so passwords can fade away over time.
Server-assisted encryption
Extra protection when you’re online, without server-side vault storage.
Available for Desktop and Android
Use WQR on your Desktop and Android devices. Your vault stays local — the server only assists security operations.
- Android — available
- Desktop — available
- iOS / macOS — coming