Most password managers say they are secure.

But very few are built on a simple idea:

The server should not be able to read your data at all.

I recently started using a tool called Lockly — a password manager built with a zero-knowledge architecture.

Lockly password manager focuses on doing one thing right — secure storage and synchronization of sensitive data.

No big launch. No marketing noise.

Just quietly released.

What makes it different

The core idea is zero-knowledge architecture.

All sensitive data is encrypted on the client side, before it ever leaves your device.

The server only stores ciphertext.

It literally has no ability to decrypt anything.

How it works (simplified)

Encryption flow looks like this:

You have a secret phrase

It is processed using Argon2id (key derivation)

A strong encryption key is generated

Data is encrypted using AES-256-GCM

Only encrypted data is sent to the server

Even if someone gets full access to the database:

→ they only see encrypted blobs

Without…