SorenDownload
Previewv0.5.0 · not audited yet

Every password. Only yours.

Soren keeps your passwords, 2FA codes, cards and notes in a vault that's locked on your own computer. We store the locked box. Only you have the key, so not even we can open it. And it's free.

Download Soren

Free · v0.5.0 preview · 4.0 MB

Bring everything with you from

  • Chrome
  • Safari
  • Firefox
  • 1Password
  • Bitwarden
  • LastPass

Your vault

Everything in one calm, dark place.

Your sites show up with their real logos, grouped so the same account never appears twice. Search forgives typos. Open a login and its 2FA code is right there.

Features

All the good parts. None of the upsell.

What you'd expect from the big names, plus a few things they don't do.

Sign in with a passkey

Touch ID or your phone instead of a password to reach your account. Nothing to phish.

A master key you can't get wrong

Soren picks seven random words for you, plus a recovery code and a printable Emergency Kit.

Quick lock, your way

Add an optional device password to unlock fast on your own computer, without typing the whole key.

Import in a minute

From Chrome, Safari, Firefox, 1Password, Bitwarden or LastPass. Duplicates are skipped.

Search that forgives

Type “netflx” or “gihub” and still land on the right login.

Breached password check

Find out if a password has shown up in a known leak, without ever sending the password.

A health score

See weak, reused and leaked passwords at a glance, and fix the worst first.

2FA codes built in

Keep your one-time codes next to the login they belong to. No second app.

More than passwords

Secure notes, cards, identities and Wi-Fi networks, all encrypted the same way.

Send links

Share a password with anyone, even without Soren, through a link that opens a set number of times and then expires.

Discreet mode

Mask personal details on screen with one click while you're sharing or streaming.

Invisible to screen capture

On Mac and Windows, the app hides itself from screenshots and screen recordings, so your vault never ends up in a video.

Also: seven languages (English, Español, Français, Deutsch, Português, Italiano, 日本語), light and dark themes, and an optional Discord status that never shows anything from inside your vault.

Zero-knowledge, explained simply

Like a safe-deposit box where only you hold the key.

A bank can keep your box safe, but it can't open it. Soren works the same way: we look after your vault, you hold the only key.

  1. 1

    Your key stays with you

    Your seven-word master key is made on your device and never sent anywhere. Soren uses it to lock your vault right there.

    embercanyonvelvetorbitmaplequietharbor
  2. 2

    It's scrambled before it leaves

    Every password and note is encrypted on your computer. What goes over the internet looks like noise to anyone who isn't you.

    netflix.com · hunter2-but-better

    ↓

    x9F2kQ7vLm0aZ1pR8tYc3eW5nBq…

  3. 3

    We keep a box we can't open

    Our server stores the locked vault so it can sync. Without your key it's useless to us, to hackers, and to anyone who asks us for it.

    vault.sealed · 1,204 items · unreadable

What Soren can see

  • Your email address
  • When you signed up and last synced
  • How many items you have, and their size
  • Which devices are signed in

What Soren can't see, ever

  • Your master key or recovery code
  • Your passwords, 2FA codes and notes
  • Which sites you have logins for
  • Your cards, identities and Wi-Fi

The flip side: if you lose your master key and your recovery code, nobody can get your vault back. Not even us. That's what the Emergency Kit is for.

Security

Well-known building blocks, used carefully.

No home-made cryptography. Soren uses standard, widely reviewed algorithms and keeps every secret on your device.

XChaCha20-Poly1305

Encrypts every item, each with its own random nonce, via libsodium.

Argon2id

Turns passwords into keys slowly on purpose, so guessing them is expensive.

77-bit master key

Seven words picked at random from 2,048. Generated, never chosen, so it's never a guessable one.

Passkeys (WebAuthn)

Account sign-in with Touch ID or a security key. There's no password for anyone to steal.

k-anonymity breach check

Only the first 5 characters of a password's SHA-1 hash leave your device. The match happens on your computer.

Screen-capture protection

On Mac and Windows, the app asks the system to leave its window out of screenshots, recordings and screen sharing. (Linux has no such switch.)

Honest note: this is a preview

Soren is still being built, and its encryption hasn't been checked by an outside security firm yet. That audit comes before a full launch. Until then, keep a copy of anything you can't afford to lose somewhere else too, and keep your Emergency Kit safe.

Pricing

One plan. It costs nothing.

Other password managers save their best features for a paid tier. Soren doesn't have tiers. No trial, no card, no “upgrade to unlock”.

Soren

$0forever, for everyone

  • Unlimited passwords and devices
  • 2FA codes, notes, cards, identities, Wi-Fi
  • Breached-password check and health score
  • Send links
  • Import from six password managers and browsers
  • Passkey sign-in and Emergency Kit
Get Soren free

FAQ

Questions, answered plainly.

Is Soren really free?

Yes. Every feature on this page is free, with no paid tier, no trial and no ads.

What does “zero-knowledge” actually mean?

It means your vault is encrypted on your device with a key that never leaves it. Soren's server only ever holds scrambled data, so we can't read your passwords, and neither can anyone who breaks into our server or asks us for your data.

What happens if I forget my master key?

Use your recovery code, which you get when you sign up. It's also printed on your Emergency Kit.

If you lose both the master key and the recovery code, your vault can't be recovered by anyone, including us. That's the price of us not being able to read it.

Has Soren been audited?

Not yet. Soren is a preview build and its encryption hasn't had an outside audit. It uses standard algorithms (XChaCha20-Poly1305 and Argon2id via libsodium), but “standard parts” isn't the same as “checked by experts”. An audit is planned before a full launch.

Can I move my passwords over from somewhere else?

Yes. Export a file from Chrome, Safari, Firefox, 1Password, Bitwarden or LastPass, then import it in Soren under Settings. Duplicates are skipped, so importing twice is safe. Delete the exported file afterwards: it isn't encrypted.

My Mac says it can't open Soren. What do I do?

The preview isn't signed by Apple yet, so macOS asks you to confirm the first time. Open the downloaded file, drag Soren into Applications, then open it. When macOS says it can't verify Soren, click Done.

Then open System Settings → Privacy & Security, scroll down to “Soren was blocked”, click Open Anyway and enter your Mac password. You only need to do this once.

Windows says “Windows protected your PC”. Is that OK?

That's Windows being careful with a new app that isn't signed yet. Click More info, then Run anyway. You only see it the first time.

Does Soren work on Windows, Linux or my phone?

Soren is made for Mac, Windows and Linux, and the download button picks the right one for you. The Mac app runs on every Mac, Apple Silicon or Intel. Ready right now: Mac, Windows, Linux. iPhone and Android apps aren't built yet.

How can the breach check work without sending my password?

Soren turns the password into a fingerprint (a SHA-1 hash) on your computer and sends only its first five characters, through Soren's server, to Have I Been Pwned. It gets back hundreds of possible matches and checks them on your computer. Nobody else learns your password, or even which of those matches was yours.

What does the Discord status show?

It's off unless you turn it on. Then Discord shows that you're using Soren, like “Managing their vault”. Nothing from inside your vault is ever shared.

Lock it down. Keep the only key.

One download. Free, private, and ready in about two minutes.

Download Soren

Free · v0.5.0 preview · 4.0 MB