Security

Security isn't a feature.
It's the foundation.

Your household's documents and IDs are among the most sensitive things you own. So Zoey is end-to-end encrypted from the start — only you can open your vault. Not our team, not our servers, not anyone else can read what's inside.

How your vault is locked

Zoey is built so only you can unlock your information — using something you know and something you have.

Create a household passphrase

Something only you know.

Tap your passkey

Something only you have.

Zoey combines them

Right in your browser. Never sent to us.

Your data is encrypted

Saved to our servers in a form we can't read.

A recovery code keeps you safe

Use it if you ever lose your device or passkey.

Everyday details are always visible. Non-sensitive, day-to-day info — expiry dates, renewal windows, what you own and where — shows up right away. The sensitive stuff — ID numbers, account details — stays separated behind your encrypted vault until you unlock it.

Built to stay locked

Wrong-password canary

We'll alert you to suspicious activity.

Tamper protection

Your data is locked to your household. It can't be swapped or moved.

Always improving

Our security is covered by automated tests, every release.

Zoey cannot access your data — not our team, not our servers, not anyone. We need your passphrase and your passkey, together, to unlock anything.

Attachments live in your own Google Drive — Zoey stores only metadata and an encrypted reference, never the file itself.

Until you unlock it, sensitive fields show as 🔒 Locked across the app, and the vault re-locks itself the moment you step away. Simple where it should be simple, and truly private where it matters most.

New to passkeys? See what they are and how to set one up →

Your data, kept yours.

Join the early-access waitlist and be among the first households to put Zoey to work.

Join the waitlist