Quanta
Post-Quantum Password Vault
A local-first password manager with post-quantum cryptography. Your vaults are encrypted .qarmor files on your machine — no server, no account, no database.
Nothing leaves your browser.
Why Quanta?
Post-Quantum
ML-KEM-1024 (FIPS 203) key encapsulation, Argon2id key derivation, ChaCha20-Poly1305 AEAD. No classical ECC or RSA anywhere in the encryption path.
Local-First
Everything runs in your browser via WASM. No uploads, no sync service, no accounts. Your vault is a file on your machine that only you control.
Open Source
MIT licensed. Every line is on GitHub. The cryptography is provided by the auditable qarmor Rust library, compiled to WASM unmodified.
Interoperable
Qarmor v3 envelope format. Decrypt your vault with the qarmord CLI. Export public keys for CLI-based encryption workflows.
Three ways to unlock
Keypair + Passphrase
An ML-KEM-1024 key pair. The secret key is encrypted with Argon2id (64 MB, 3 passes, 4 threads) and your passphrase. Fingerprint-verifiable with qarmord.
Unprotected Keypair
Same key pair, stored as raw hex. No passphrase wrapping. Good for automation or testing. The app warns before you use this mode.
Passkey (WebAuthn PRF)
Lets your device's authenticator derive the secret via the PRF extension. Nothing leaves the authenticator. Requires a PRF-capable passkey.
How it works
Create an identity
Generate an ML-KEM-1024 key pair. The app downloads an identity file (.qarmor-id) and an empty vault (.qarmor). Keep both.
Add your passwords
Add, edit, and search entries. Generate strong passwords with the built-in CSPRNG generator. Everything stays encrypted in memory.
Save & lock
Download the updated .qarmor file to disk. Auto-lock kicks in after 5 minutes of inactivity. The vault is secure at rest.
No sign-up. No server. Just post-quantum cryptography in your browser.