Passwords and secrets that even SovSec can't open.
Prismara Prism is a zero-knowledge, post-quantum password and secrets manager. Vaults are encrypted on your device with keys derived from your master password and a device-generated Secret Key, so a full breach of SovSec's servers would expose nothing. It runs on Prismara OS, inside Prismara Browser and as an extension for other browsers.
What Prismara Prism does
Everything in one vault
Logins, passkeys, one-time codes, secure notes, cards, identities, SSH keys, API keys and files.
Safe autofill
No fill on page load, ever. Prism fills only after you click, only on an exact site match over HTTPS, and only into fields you can see.
Phishing warning
A look-alike site gets a blocking warning instead of a fill option.
Built into Prismara Browser
The browser engine fills credentials as the form is sent, so page scripts and other extensions never see them.
Prismara OS secrets provider
Other apps store their secrets in Prism. It includes an SSH agent and a Git credential helper.
Works offline
Each device keeps an encrypted copy of your vault and syncs changes when it reconnects.
How it's secured
Prismara Prism follows the engineering rules shared across the suite, plus these product-specific measures.
Server can't guess your password
Sign-in uses OPAQUE, so the server never sees your password or anything it could guess offline.
Phishing-resistant second factor
A security key or passkey is required for every business account.
Key transparency
Public keys are published to an append-only log that clients check before sharing, so SovSec can't swap in its own key.
Recovery stays yours
SovSec can never recover a vault. Recovery uses your Emergency Kit, another device or, if your organisation opts in, two of three named administrators.
Connects to the rest of the suite
Want SovSec to run it for you?
SovSec provides managed security, SOC and Microsoft 365 services for organisations in the UK and DACH region, and can run Prismara as part of that service.