Woosool Aman · Vault
Passwords and secrets, encrypted before they leave your device.
Woosool Aman keeps passwords, keys and team secrets in a zero-knowledge vault. Everything is encrypted in your browser, the server stores only encrypted data, and Woosool cannot read your vault.
Overview
What you can do
- 01
Every kind of secret
Logins with two-step codes, secure notes, developer and server keys, certificates, cards, identities, Wi-Fi, database passwords and app settings.
- 02
Password health
Spot weak, reused, old or common passwords, and replace them with the built-in generator.
- 03
Secrets manager for teams
Organise your team’s app secrets by project and environment, with access per environment, revisions, side-by-side comparison and rollback.
- 04
Command-line tool that leaves no files behind
The woosool-vault command-line tool uses read-only access keys to fetch secrets or pass them to a program without saving them on disk.
- 05
Share with care
Share vaults with view, edit, manage or owner rights. Removing a member rotates the vault key.
- 06
Organisation policies
Set password strength rules, turn off export, limit sharing and cap auto-lock time. The audit log records metadata only.
- 07
Easy to switch
Import from other password managers and from your browser’s saved passwords, and export in encrypted form.
- 08
On your phone
The Android app unlocks with biometrics and fills passwords with Android autofill.
Also included
- Encrypted attachments
- Password history
- Item versions with restore
- Folders, tags and favourites
- Server sign-in keys generated in the browser
- Import secrets from configuration files
- Export secrets to the configuration files developers use
- Secret references
- Security alert emails
- Printable recovery kit
- Trash
Connected
Works with the rest of Woosool
Security
Security and privacy
- Zero-knowledge encryption
Items are encrypted in your browser with strong encryption and a separate key for each item and file. The server stores only encrypted data.
- Strong key derivation
Your master password is strengthened in your browser in a way that is deliberately slow and costly to guess.
- Sealed sharing
Shared vault keys are sealed separately for each member, and removing a member changes the key.
- Only you can recover
Woosool cannot reset your master password. Your recovery key is the backup, so keep your recovery kit safe.
- Hardened web app
The vault locks automatically, and strict browser protections stop other code from running inside it.
Planned
Not available yet. These are on the roadmap, and we will say so here when they ship.
- Unlock with a passkey
- Emergency access
- Desktop browser extension with autofill
- Sharing with groups
Woosool Aman
Questions and answers
Can Woosool see my passwords?
No. Your vault is encrypted in your browser before it is sent, and the server only ever holds encrypted data.
What if I forget my master password?
Use your recovery key from the printable recovery kit. Woosool cannot reset the master password for you.
Can I move from another password manager?
Yes. Aman imports the export files of the most common password managers and web browsers.
Can developers use it for app secrets?
Yes. The secrets manager organises secrets by project and environment, and the woosool-vault command-line tool passes them to your programs without saving them on disk.
Is there a browser extension?
Not yet. A desktop browser extension with autofill is planned. On Android, the app supports autofill today.
One account. Every app. Your data.
Create a Woosool account and start with Barid, Yoom, Khazna and the rest of the suite.