ACS VaultClient-Side Encryption

Create your ACS account

Register a directory identity for server-verified access. Your account password is hashed with scrypt; a separate vault passphrase protects 2FA seeds locally and is never transmitted.

Two separate secrets

This form creates your directory account. The API hashes the password with scrypt and issues HttpOnly session cookies. Your vault master passphrase is different: it feeds the client-side KDF for the AES-256-GCM sealed payload and never leaves this device. A plaintext localStorage mirror of vault records is also kept in this build and is not encrypted at rest.

Already have an account? Sign In