Skip to main content

XVaultPro: Offline-First Encrypted Password Vault

Last updated: October 15, 2026

On this page

Overview

XVaultPro is our offline-first credential manager. It uses AES-256-GCM authenticated encryption hardened with Scrypt key derivation, operating entirely offline on the user's own hardware, with no browser extensions, cloud sync or third-party custody. The product is in Active development and has its own external site with an Info Hub and Shop.

XColdPro protects the keys that move funds; XVaultPro protects the credentials around them (exchange logins, recovery codes, API keys). It is a desktop application with no browser extension, using AES-256-GCM. As described on xcoldpro.com, it is a separate product with its own site, documentation and pricing at xvaultpro.com.

What it stores

  • Passwords with integrated TOTP codes
  • Secure notes
  • Payment cards, masked by default
  • Identity profiles
  • Secrets and keys (API keys, SSH keys, tokens, certificates), tagged by environment

Expiry tracking warns at 90, 180 and 365 days, and version history keeps up to 20 previous values per entry.

AI access controls

The product follows a "no AI access by default" principle. Features include:

  • AI paste guard: warns when AI tools are running before a clipboard operation.
  • Agent vaulting: scoped machine identities with time limits, retrieval limits and category restrictions.
  • Human approval gates for sensitive credentials.
  • Policy engine that denies everything unless explicitly permitted.
  • Session audit of every credential retrieval.
  • Ephemeral credentials that expire automatically.

Pre-authentication airlock

Before the master password is committed, a five-stage airlock runs: trust status verification, pre-auth threat assessment, identity lane selection, a safe action strip with emergency controls, and multiple unlock paths.

Threat detection

Threat intelligence is bundled locally with no external API calls. XVaultPro scans for clipboard hijackers, keyloggers, screen capture tools, remote access trojans, debuggers and cryptominers, along with offline breach checking and phishing-domain detection.

Dual-vault mode

Two independent encrypted partitions can be unlocked with different PINs, each with its own key derivation, in a single installation.

Estate recovery

Shamir estate recovery is part of the product.

Previous
XMarket: Planned Collector Marketplace
Next
XColdPro: Air-Gapped Cold Wallet Software