Heimlane Vault
The zero-knowledge password vault, hosted in Europe.
Heimlane Vault is a zero-knowledge business password manager, Bitwarden-compatible, hosted in France and Germany. Your team's credentials are encrypted before they ever leave the device.
Looking for a password manager for yourself or your family? See Vault for individuals →
See Heimlane Vault in Action
Heimlane Vault for teams, in 3 minutes
Heimlane Vault gives you a clear overview of your security. The dashboard lets you monitor your credential health in real-time, quickly identify weak passwords, and track your team's recent activity.
With relevant metrics like your security score, shared items count, and recent actions, you stay in control of your security posture at all times.
Key Differentiators
Zero-Knowledge Security
Zero-knowledge encryption architecture implemented through the highest encryption standards, ensuring that only you have access to your data.
Your data remains encrypted end-to-end: we can never access your data, passwords and files that are only decrypted on your machines, by your users.
Flexible Tiers and Team Management
Different license tiers to fit you, from Free to Business, with support for shared vaults for granular access control.
Organize credentials the way your team actually works.
Secure External Sharing
Share credentials, documents or any other sensitive content securely with third parties with a single click without compromising your own security.
Perfect for your contractors, partners and suppliers.
Secure Receiving
Need a password or a document from someone who has no account? Send them a request link: what they send is encrypted on their device, and only you can open it.
No more credentials arriving by email or SMS from your clients, suppliers or colleagues.
Key Features
- Multi-platform (Mobile, Desktop/Laptop & web vault)
- Browser extension with auto-fill
- Mobile apps with biometric unlock
- Two-factor authentication (built-in TOTP)
- Hardware security keys (FIDO2 / WebAuthn)
- Compromised-password checks
- Security score and alerts
- Deduplication engine
- Team password sharing with public-key encryption
- Cryptographically isolated shared vaults, not mere access control lists (ACL)
- Secure zero-knowledge file storage
- Emergency access via a trusted contact
- Role-based access control (RBAC)
- Audit logs
Built-in protection for every account
Heimlane Vault does more than store passwords: it checks them, protects the account itself, and plans for the day you cannot sign in.
Emergency Access
Name a trusted contact who can request access to your vault if something happens to you. You choose a waiting period of 7, 14 or 30 days and can reject the request at any time before it ends. Access is read-only: your contact can never change your vault or lock you out.
Premium plans and above.
Hardware security keys (FIDO2)
Protect your sign-in with a FIDO2 / WebAuthn security key, such as a YubiKey, on top of your master password. Register up to 5 keys per account, so a lost key never locks you out.
Premium plans and above.
Breach checks
Find out whether your passwords appear in known data breaches. The check relies on k-anonymity: only a short fragment of the password's hash leaves your device, never the password itself.
Manual checks on every plan; automatic and bulk checks planned for paid plans.
Security Scorecard
One score for the health of your vault, with reports listing weak, reused and exposed passwords, so you know exactly which ones to change first.
Premium plans and above.
Login with Device
Sign in on a new device by approving the request from a device where you are already signed in, without typing your master password. The vault key is passed encrypted for that new device only: Heimlane never sees it.
Import from any CSV
Moving from another tool? Vault recognizes common export formats automatically. For anything else, map each column of your CSV file on screen and preview exactly what will be imported before you confirm. Items are encrypted on your device as they are imported.
Switching from another password manager? What to look for in a European alternative →
Instant Access Across All Your Devices
The browser extension and mobile apps give you immediate access to your credentials, wherever you are. Intelligent autofill detects websites and suggests the appropriate credentials with a single click.
With biometric unlock on mobile (fingerprint, Face ID), access your passwords securely without having to retype your master password every time.
Transparent pricing. No surprises.
Create a free account right away. No commitment, no credit card required.
Later, straight from your Vault, you can subscribe to a plan for extra features if you wish.
Our plans are available with monthly or annual billing.
Deep dive: how your vault stays unreadable (4 min)
Every member of your team gets the same protection: the key that encrypts their vault is created on their own device, and Heimlane never knows it.
Technical Details
Strong encryption, segmented per vault
Each shared vault has its own encryption key: true cryptographic segmentation, not mere access control.
You can prove to your clients that only authorized people can decrypt the data - it's cryptographically impossible for others.
This builds trust and demonstrates compliance.
Encryption to the highest international standards
Compliant with OWASP and ANSSI recommendations:
Argon2id, PBKDF2
RSA-2048, AES-256
HMAC-SHA256, HKDF-256
TLS-1.3, PFS, HSTS
End-to-end encryption, no compromise.
Zero-knowledge architecture
All cryptographic operations are performed only on your machine, in the app and even in the browser, NEVER on Heimlane servers.
This is the guarantee that only you have access to your data.
Trust and Hosting
Hosted in France (OVH) and Germany (Hetzner).
Export of your data possible at any time.
Get the Vault Datasheet
Download our detailed product datasheet, covering features and technical specifications.
Download DatasheetReady to Get Started?
Join us and start securing your business today.