Ark Vault

Keep what matters in one vault

Logins, one-time codes, notes, cards, keys and files. Search, tags and favorites help you find what you need.

Personal vaultSearch the vault

Email

The secret stays hidden until you act: reveal or copy it in one tap.

Usernamealina@example.com

Password

••••••••••••

Encryption starts with you

Vault contents are encrypted on your device before they are sent. During sync, the client checks signatures and the history chain.

Your device

The app encrypts records and files before upload.

The server

Stores ciphertext and sends changes to devices with access to the vault.

Your other device

Verifies the history and decrypts data after you unlock it.

Encryption hides vault contents. The server can still see operational metadata: members, sizes, request times and IP addresses.

Plan your way back in

Keep the emergency sheet with your Secret Key and recovery code. You can also set up a separate recovery key requiring any 2 of its 3 shares. Encrypted export helps you move records; a separate utility opens a saved data copy with the required keys.

How it works

Argon2id and a Secret Key are used to derive account keys. Data is encrypted with XChaCha20-Poly1305. Ed25519 signatures and a hash chain let the client verify vault history.

Bring your data with you

Import passwords from Bitwarden JSON, KeePass XML or .kdbx, and browser or password-manager CSV files. You can also import 2FA codes from authenticator apps.

Bitwarden
KeePass
CSV
Google Authenticator
Aegis
2FAS

Export records under a separate password as Ark JSON or .kdbx. The .kdbx export includes attachments; Ark JSON stores their references without file contents.

Windows and Mac today. iPhone next.

Download the client for your computer. For iPhone, see the planned steps without promised dates.

Download for WindowsVersion 0.2.3 · installer · EXE · 41.3 MB Download for MacVersion 0.2.3 · Apple Silicon · DMG · 41.0 MB

First launch: right-click Ark → Open. On macOS 15 and later: Privacy & Security → Open Anyway.

First launch: if SmartScreen appears, click More info → Run anyway.

Looks like an Intel Mac: the build is for Apple Silicon (M1 and later) only for now.

Ark is a desktop app: open this page on Windows or Mac.

Open registrationContact Arevian

Windows

Available · x64

A native app with records, files, shared vaults and sync. Download the installer directly and create your account in the app. If SmartScreen appears on first launch, click More info → Run anyway.

Download for Windowsinstaller · EXE · 41.3 MB portable · ZIP · 52.4 MB

macOS

Available · Apple Silicon

The same app for Apple Silicon Macs. The build is not yet signed by Apple: on first launch, right-click Ark and choose Open. On macOS 15 and later, go to System Settings → Privacy & Security → Open Anyway.

Download for MacApple Silicon · DMG · 41.0 MB

iPhone

Test build

A native app with passwords, files, sync and system autofill in Safari and other apps. It is a test build for now; the public release will come through TestFlight and the App Store.

Technical prototype
Closed beta · TestFlight
Review and App Store

Telegram Mini App

Additional access

View and search records, copy secrets, use OTP codes and one-time links with an existing account. Connect by QR; Telegram biometrics where available. A full editor and file interface are not available yet.

The iPhone release date is not set yet. Telegram Mini App remains an additional channel and does not replace a native iOS app with autofill.

Before your first vault

Can I download it and start right away?

Yes. Download the app for Windows or Mac and create your account right in it — no invitation needed. An invitation code still works if you received one.

Why does Windows warn about the publisher?

The installer does not yet have an Authenticode publisher signature, so Windows may warn about an unknown publisher. Use the download link on this page. Minisign verifies Ark Vault updates; it does not replace Authenticode.

What works offline?

Once current records have downloaded, an encrypted local copy remains on the device. You can read and edit records offline; edits wait for sync. Attachments and earlier versions are not automatically downloaded in full. A device should not be treated as a complete vault backup.

What if I forget my password?

The code on your emergency sheet lets you recover access and set a new password. The recovery utility can open a separate data copy with the required keys or any 2 of 3 recovery shares created beforehand. Recovery needs saved data and keys; it cannot be promised if everything is lost.

What happens when access is revoked?

The member is removed from the vault and the vault key rotates for those who remain. This blocks access to new versions. Secrets already read or copied cannot be taken back; the app reminds you which passwords to change.

When will the iPhone app and Apple signing for Mac arrive?

Dates are not set yet. The Mac app is already available for direct download; Developer ID signing and Apple notarization come next. iPhone has a test build with autofill, followed by a closed TestFlight beta and the App Store.

Is there an independent audit or open source code?

An independent audit or certification has not been confirmed. The product repository is private, so we do not describe it as open source. We explain the implemented protections and their limits without promising absolute security.

Next step

Start with your own vault

Download Ark Vault for Windows or Mac and create your account in the app. Save your recovery keys before filling your vault.