Two independent passwords
One password signs you in. A separate vault password unlocks your encrypted data. Even if one is compromised, the other stays safe.
Zero-knowledge encryption
Your passwords and files,
encrypted before they leave your device.
Arca encrypts everything in your browser. The server never sees your vault password, your encryption keys, or your data in the clear.
Sign in
Server
Unlock vault
Your browser
Derive keys
Your device
Decrypt & view
Client only
Everything you need to keep secrets safe
Encrypted in your browser
Encryption and decryption happen entirely on your device. The server only ever stores ciphertext it cannot read.
Encrypted file storage
Drag and drop files into your vault. Each file is encrypted on your device before it ever touches the server.
Single sign-on
Sign in with your company identity provider — Microsoft Entra ID, Google Workspace, or Okta. Your vault stays encrypted regardless.
Passwords & secure notes
Store logins with usernames, passwords, and URLs. Keep sensitive notes encrypted alongside your credentials.
Session control
See every active session and revoke any you don't recognise. Lock the vault without signing out.