YOUR IDENTITY
IS NOW GHOSTED.
SPCTR keeps your passwords, your two-factor codes and your real email address out of everyone else's hands — including ours.
Everything is locked on your own device before it ever reaches us, so all we can ever see is scrambled data. Try the live demo to see exactly how it works.
Free plan available · no credit card required
Welcome back, Morgan.
Your private protection controls in one place.
Activity
/ signal_streamCommand center
Your protection posture at a glance
Your encrypted data stays in reach as SPCTR expands across platforms.
Easy to use.
Built to protect you.
Whether you're securing your first account or managing a more advanced setup, SPCTR keeps your passwords, two-factor codes, private email aliases, and breach alerts together in one encrypted place.
Password Vault
Stores every password behind one master phrase you set. We only ever see a scrambled blob — the real thing is decoded on your device.
2-Factor Codes
The 6-digit codes that refresh every 30 seconds — right inside SPCTR. No separate Authenticator app to juggle.
Email Masks
Create a private @spctrmail.com alias for each sign-up. Messages reach your usual inbox, and you can disable an alias at any time if it starts receiving spam.
Breach Alarm
We check your emails and passwords against known leaks. If yours show up, you'll know within seconds — not months.
Passkeys & Keys
Sign in with Face ID, Touch ID, Windows Hello or a YubiKey — and let SPCTR store passkeys for other sites too. No password to phish.
Notes & Secrets
Secure notes, API keys, SSH keys, cards and IDs live in the same encrypted vault, on every device and inside the extension.
Your vault is unreadable everywhere but your device.
Your passphrase and encryption keys never reach SPCTR. We store encrypted blobs, routing metadata, and account information—but never plaintext vault contents.
Read the threat modelAES-256-GCM seals each item before it leaves your device.
Argon2id turns your passphrase into a key that remains in memory only.
Encrypted export and offline recovery protect access without giving SPCTR your key.
Protection that fits the mission.
Cover yourself, look after everyone at home, or roll SPCTR out across a whole company with proper admin control.
Individuals
Your passwords, sign-in codes, masked email addresses and breach alerts, all in one private vault.
View personal plansFamilies
One plan covers up to five people, and everyone still keeps their own private vault that nobody else can open.
Compare family plansOrganizations
Buy licences in packs, let staff sign in with their work Microsoft account, and cut off access the day someone leaves.
Explore enterpriseChoose your tier.
The free plan stays free for good. Upgrade when you want unlimited email masks or coverage for the whole family, and cancel from the billing portal whenever you like. Buying for a team? Take a look at the enterprise license packs.
Free
Everything you need to disappear online.
- ›Password generator & vault
- ›5 TOTP codes
- ›3 email masks
- ›Breach checking
- ›Passkey sign-in
- ›1 device sync
Plus
For people who take privacy seriously.
- ›Unlimited TOTP codes
- ›Unlimited masks & custom alias names
- ›Unlimited AutoFill personas with alias builder
- ›iPhone AutoFill with Face ID
- ›Passkeys & 5-device sync
- ›Priority breach alerts
Pro
Zero-knowledge suite for pros and teams.
- ›Everything in Plus
- ›Unlimited devices
- ›Browser extension pro with I.D. Studio
- ›Hardware security keys
- ›Priority support
Family Plus
Plus for the whole household, one bill.
- ›Everything in Plus
- ›Up to 5 family members
- ›Owner-managed invites
- ›Per-member vault isolation
- ›Shared plan billing
Family Pro
Pro for the whole household, one bill.
- ›Everything in Pro
- ›Up to 5 family members
- ›Owner-managed invites
- ›Per-member vault isolation
- ›Shared plan billing
How SPCTR stacks up
Every manager here encrypts your vault. The difference is what happens around it — aliases, recovery, and whether the code can be read.
| Capability | SPCTR | 1Password | Bitwarden | Dashlane | Proton Pass | NordPass |
|---|---|---|---|---|---|---|
| Zero-knowledge encryption | ● | ● | ● | ● | ● | ● |
| Open-source client | Not verified | — | ● | — | ● | — |
| Email aliases | ● | Integration | Integration | Not verified | ● | Not verified |
| iPhone AutoFill with Face ID | ● | ● | ● | ● | ● | ● |
| Argon2id key derivation | ● | Not verified | Optional | Not verified | ● | Not verified |
| Breach monitoring | ● | ● | Paid plans | ● | Paid plans | Paid plans |
| Built-in TOTP codes | ● | ● | Paid plans | ● | Paid plans | Not verified |
| Secure notes | ● | ● | ● | ● | ● | ● |
| Free tier across devices | Unlimited | Trial only | Unlimited | Varies | Unlimited | One device |
- ●Unlock the vault with a passkey — no master password to type
- ●Passkey step-up after email sign-in
- ●Guided persona builder with custom fields
- ●Create an email alias while building a persona
- ●Reply from your aliases
- ●Offline recovery phrase and trusted-contact recovery
- ●Cross-device sign-in approval
- ●Duplicate login cleanup with review
- ●Monthly in-app recap of what's new
Reviewed October 2026. "Not verified" means we haven't confirmed it — not that it's missing. Features and pricing vary by plan; check each provider's current plans below.
Trademarks belong to their respective owners.
Credential security for the whole organization.
License packs from 10 to 100 users, Microsoft Entra sign-in, and central offboarding—without folding employee vault ownership into the company account.
Every version, in the open.
Scroll the complete release history — 69 versions from launch to today.
Put every credential—and your real identity—out of reach.
Open your zero-knowledge vault in the browser, then carry it into Chrome or Firefox. No credit card required.