RudelKey
Android and Windows · in development

One key. For every password.

RudelKey remembers your passwords, fills them in apps and browsers and creates strong new ones. Everything is stored encrypted on your phone and PC – and, if you like, in your own cloud folder, not with a provider. Shared passwords go into family vaults.

  • no provider account
  • autofill
  • Windows and Firefox
  • family vaults
  • emergency kit
Vault 🔒 locks in 5 min
🔍 Search
BBankanna.miller••••
SStreamingfamily@…••••
WHome Wi-FiRouter••••
EE-mailanna@…••••
CClubmember 4711••••
New password · 20 characterstR7#vQm2!xKp9$eLw4&Z
Features

Never “forgot password” again

Filling in apps and browsers

On the phone RudelKey is your autofill service: login fields are detected, RudelKey suggests matching logins and asks whether a new login should be saved – even with several logins under the same address, such as several routers.

On the Windows PC too

RudelKey is also available for Windows, unlocked with Windows Hello (PIN, face or fingerprint). A Firefox extension fills in logins, saves new ones and inserts generated passwords – it only talks to the app on the same PC.

Vaults for the family

Everyone keeps their personal vault; on top come shared vaults, such as “Family” for Wi-Fi and streaming or “Parents” for bank and insurance. Parents edit, children view and fill in. Move entries one by one or several at once.

Fingerprint and lock

Confirm once with the master password, then your finger opens the vault. You decide when RudelKey locks itself again. Copied passwords go to a protected clipboard that clears itself.

Strong passwords at the touch of a button

The generator creates long random passwords to your preset, optionally without easily confused characters like l, I, 1, O and 0.

Move in a minute

Bring your passwords over from Chrome, Edge, Firefox, Bitwarden or KeePassXC via CSV export. RudelKey detects duplicates.

Sync via your cloud

On the phone via a folder in your OneDrive, on Windows via a folder synced by OneDrive, Nextcloud, Dropbox or Google Drive. Only encrypted data ends up there – there is no RudelKey account.

Emergency kit

During setup you get a recovery key to print out. If you forget the master password, it gets you back to your passwords.

Help from the family

If the emergency kit is lost, family members help together – no one alone. Each helper holds only part of your key; only the chosen number together opens the vault again.

Security

What RudelKey doesn’t know, it can’t give away.

Your master password never leaves the device, and nobody – not even me – can reset it. Encryption relies on proven algorithms from the libsodium library.

Argon2id

The key is derived from your master password with 64 MiB of memory and 3 passes – more than OWASP recommends. Guessing becomes expensive.

XChaCha20-Poly1305

Every entry is encrypted individually and bound to its vault. Tampering with the file produces an error, not wrong data.

240-bit emergency kit

The recovery key is pure randomness with a checksum against typos. It is shown only once.

The cloud folder only contains encrypted data. Its security therefore depends on your master password: use a sentence of several words rather than a short, complicated password.

Privacy

No account, no server, no ads

RudelKey only connects to the internet if you turn on sync via OneDrive. The Firefox extension only talks to the app on the same PC. All details

On your device

The vault is stored encrypted in the app’s storage. Without master password or emergency kit it is worthless.

Filling stays local

What RudelKey learns about an app or site while filling never leaves your device.

No ads, no tracking

No analytics, no advertising, no crash reports.

RudelKey for Android and Windows

RudelKey is in development. If you’d like to hear when it launches, send me a short e-mail.

  • SystemAndroid 9 or later · Windows 10 and 11
  • BrowserAndroid: any with autofill · Windows: Firefox
  • Syncoptional, via your own OneDrive (on Windows also other sync folders)
Questions

FAQ

What if I forget my master password?

Then only the emergency kit helps: with the recovery key you unlock the vault and set a new master password. Without either, nobody can get to the data – not even me. Keep the kit somewhere safe, for example printed with your documents.

Can Microsoft read my passwords in OneDrive?

No. Only data encrypted on the phone beforehand goes into the folder. Without your master password it is unreadable.

Does autofill work in Chrome?

Yes. On the phone you also need to enable filling via another service in Chrome under Settings → Autofill services; Firefox needs nothing extra. On the Windows PC there is the Firefox extension, not yet one for Chrome and Edge.

What do I do with the CSV file after importing?

Delete it right away – including from the recycle bin and downloads. It contains all passwords unencrypted.