The Secrets Vault is a zero-knowledge password and file manager for individuals, families and businesses. Passwords, files and ID documents are encrypted in the browser with AES-256-GCM before they are uploaded, so the service stores only ciphertext and cannot read your vault. Data is hosted in South Africa, and personal information is processed in line with POPIA. Free for 7 days through AWS Marketplace, with no card needed. To keep using The Secrets Vault after that, you choose a paid plan, billed in rand directly by FAHZY (Pty) Ltd. Nothing is ever charged through AWS.
The Secrets Vault keeps passwords, one-time codes, notes, files and ID documents in one encrypted vault that only you can open. Your master password never leaves your device: your browser runs it through PBKDF2-SHA256 for 250,000 rounds to derive the key that encrypts your vault with AES-256-GCM, and only the encrypted result is uploaded. If our servers were breached, an attacker would get ciphertext and nothing else.
Store logins with a built-in password generator and keep two-factor (TOTP) codes beside the accounts they protect. Password health checks flag weak, reused and old passwords, and breach checks use HaveIBeenPwned's k-anonymity range search, so neither your password nor its full hash leaves your device. Keep passports, licences and contracts with expiry reminders, preview files in the browser, and send a password, note or file through a view-once link that self-destructs after a single view. Protect sign-in with an authenticator app or a FIDO2/WebAuthn security key. A one-time recovery code and emergency access for a trusted contact mean you can get back in without us ever holding your key.
For teams and businesses, shared collections group logins, documents and keys, each with its own encryption key that is granted only to the members who need it. Teams includes owner, admin, manager and member roles, an audit log with CSV export, and a policy that requires two-factor authentication. Business adds groups, share-link and export controls, a minimum password strength and opt-in admin-assisted account recovery. When someone leaves, their access ends and the keys they held are rotated. Families get a shared family vault for up to five people, and every member keeps a private vault.
Moving in takes minutes: import from Bitwarden, LastPass, 1Password or any CSV file, and export your vault at any time while your subscription is active, as an encrypted file or CSV. Encrypted data is hosted in South Africa and travels only over TLS. The Secrets Vault is built and operated by FAHZY (Pty) Ltd, a South African software company.
Free for 7 days through AWS Marketplace, with no card needed. To keep using The Secrets Vault after that, you choose a paid plan, billed in rand directly by FAHZY (Pty) Ltd. Nothing is ever charged through AWS.
Highlights
Zero-knowledge encryption: passwords, files and ID documents are encrypted in your browser with AES-256-GCM, so we store only ciphertext and cannot read your vault.
Teams and Business: shared collections with their own keys, four roles, an audit log, required two-factor and key rotation when someone leaves.
Free for 7 days through AWS Marketplace, with no card needed. To keep using The Secrets Vault after that, you choose a paid plan, billed in rand directly by FAHZY (Pty) Ltd. Nothing is ever charged through AWS.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
This listing offers one pricing option: a Base plan covering a single user, free for 7 days. It is billed by user-hours, so pricing counts time per person. The plan includes 25 GB of encrypted storage for that user. Because this is a free trial dimension, you pay nothing during the 7-day period. There are no higher tiers, add-ons, or quantity choices to compare on Marketplace. Pricing covers one person on the Base plan, and the structure scales by user and time rather than by storage or features.
Top-of-mind questions for buyers
What counts as one user-hour for billing on the Base plan?
A user-hour measures one person's access time on the Base plan. Each individual on the plan counts as one user, and billing tracks the hours that person holds access. The structure meters time per person rather than storage used or features enabled.
Does my encrypted storage limit change if I use more or less space?
No. The Base plan includes a fixed 25 GB of encrypted storage for the single user. Storage does not drive your cost on this plan. Pricing scales by user and time, so using more or less space within the 25 GB limit does not change the metered amount.
What security protections apply to the data stored under this plan?
Items are encrypted on your device before upload using an authenticated cipher. Your master password is derived into a key locally and never transmitted or stored. The vendor stores only encrypted data, hosted on Amazon Web Services. Nobody at the vendor can read your vault contents.
www.thesecretsvault.com
Helpful?
Vendor refund policy
This offer is free: AWS Marketplace never charges you for it, so there is nothing to refund. For help, email support@thesecretsvault.com.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Email support@thesecretsvault.com for help with setting up, importing from another password manager, your account or your organisation. Our support team is based in South Africa (SAST, UTC+2).
Because the service is zero-knowledge, we cannot reset a forgotten master password or read your vault. Use your one-time recovery code or emergency access, or, for Business organisations, opt-in admin-assisted recovery.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
This can only be purchased as part of a Private Offer; please contact your account team for more details.
Instead of managing separate point-product contracts, your organization gets complete coverage across the entire data lifecycle through a modular collection of dedicated enterprise tools.
PCI Vault is a SaaS solution by SnapBill, Inc. offering credit card Tokenization as a Service (TaaS) combined with it's own Entropy as a Service (EaaS) engine for lightning quick enterprise grade encryption and secure storage of payment card data..
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.