Passkey-X gives security teams real enforcement, evidence and lifecycle control over company passwords, passkeys and secrets — while encryption stays on each member’s device. Your admins manage access; nobody at your company or ours can read the vault.
Everything you need to roll out, govern and prove password security.
Admin console
Organization health, members at risk, 2-step coverage and inactive accounts on one screen, with a one-click recommended security baseline.
Enforced policies
Require passkeys or 2-step sign-in, set vault password strength, auto-lock, clipboard clearing, breach monitoring, sharing boundaries and export control.
Tamper-evident audit
Every admin action, share and secret reveal is written to a SHA-256 hash chain. Verify integrity in one click and export CSV or JSON evidence.
Access reviews
See who can open every shared workspace, set just-in-time expiry, remove stale access, and export certification evidence for your auditors.
Joiner, mover, leaver
Suspend, reactivate or offboard in seconds. Offboarding revokes key envelopes and flags affected workspaces for key rotation.
Secure Send
Share a credential or file with anyone through an end-to-end encrypted link that burns after reading. Admins decide who may use it.
Credential risk insight
Weak, reused and breached password totals from every member’s device — never the passwords, sites or usernames themselves.
Missions and approvals
Time-boxed task access and approval flows give contractors and support staff exactly what they need, for as long as they need it.
Self-hosting
Run the Passkey-X server on your own infrastructure with the Docker bundle. Web, desktop, extension, Android, CLI and the Controller all connect to your address.
Controller Enterprise
Install and remove software in the background, rotate and escrow local admin passwords, give just-in-time admin rights, assign logins to shared computers and require a second admin for sensitive actions.
Zero-knowledge administration
Admin power without admin access to secrets.
Encryption keys are derived and used on members’ devices. The server — and your administrators — only ever handle ciphertext and counts.
Your admins canNobody can
Enforce who must use passkeys or 2-step sign-in Read any member’s passwords, notes or files
See how many weak, reused or breached passwords exist See which sites or accounts those passwords belong to
Remove a leaver’s access and revoke their keys Reset a member’s vault password and open their vault
Export a verifiable audit trail Edit or delete audit history after the fact
Rollout
Live in a day. Audit-ready every quarter.
Day 1
Create your organization
Start a Business workspace, invite your admins, and verify your domain users.
Day 1
Apply the baseline
Turn on the recommended policies in one click. Members see what they need to fix, inside the app.
Week 1
Roll out to teams
Create shared workspaces per department, import existing passwords, and share with roles and expiry.
Quarterly
Review and certify
Run an access review, verify the audit chain, and keep the exported evidence for your auditors.
Enterprise roadmap
Built in the open.
We tell you what ships today and what is coming next. Custom agreements can include roadmap commitments and early access.