Local by design.
Clear about the boundaries.

01 / THE RING

Encrypted here. Unlocked here.

QiRing encrypts vault data locally with XChaCha20-Poly1305. Argon2id derives the key-encryption key from your master password. Unlocking makes Ring data available in memory for your session.

The app has no online account, cloud-sync backend, or telemetry. Password generation and Ring Health analysis run locally. Source code is available under the AGPL-3.0 license.

These are descriptions of the implementation, not a guarantee against every threat. The project is in early development; keep independent backups and start with test data.

02 / CONNECTIONS

You choose when to reach out.

QiRing can open an entry’s website in your default browser. If you choose From website for an icon, it requests the favicon directly from that website, which learns your IP address and the requested hostname.

Favicon retrieval is optional and uses no third-party icon lookup service. You can upload an image from disk instead. Your Ring is not uploaded as part of either action.

03 / A WAY BACK

Recovery is in your hands.

Record your recovery key somewhere safe and separate from your computer. Recovery requires that key, sets a new master password, and replaces the recovery key. There is no account-reset service if both your master password and recovery key are lost.

Manual encrypted backups have their own passphrase. Automatic snapshots keep the Ring’s existing encryption. A snapshot on the same drive is not a replacement for an independent backup.

04 / PRACTICAL LIMITS

A secure habit still matters.

• A compromised operating system can observe secrets while your Ring is unlocked. Keep your computer updated and lock QiRing when you step away.
• Clipboard managers and OS clipboard history can retain copied secrets. QiRing’s timer clears the clipboard only while it still contains the value QiRing copied.
• Plaintext CSV exports contain readable secrets. Treat them differently from encrypted backups.
• Ring Health flags weak, reused, and older passwords locally. It is not an online breach-monitoring service.
• The current release is unsigned. OS trust warnings are expected; review the release source and verify checksums before installing.

05 / THIS WEBSITE

A static guide, with no account.

This website contains no analytics scripts, advertising, tracking cookies, or account system. Its fonts and screenshots are served with the site. Guide search runs in your browser without sending your query to a server.

The hosting server or its proxy may keep standard request logs. Downloads and external links take you to GitHub or the linked provider, whose own privacy practices apply. Every app screenshot here was captured with fictional demo data.