Comparison
How we compare, row by row.
Four mature products and one new one. Eighteen rows checked on the same day, with our four “On the roadmap” marks left in plain sight rather than buried.
| Feature | Secrets Manager | 1Password | Bitwarden | LastPass | Dashlane |
|---|---|---|---|---|---|
| MCP server for AI agentsThe agent lists and creates items; the secret value comes back redacted. | |||||
| Import a whole .env, split per variablePaste the entire file and you get one named field per variable. | |||||
| Data in the European Union, in your own Supabase project | |||||
| European Portuguese interface | |||||
| End-to-end encryption, zero-knowledge | |||||
| Personal and shared team vaults | |||||
| Sharing with roles: owner, admin, member | |||||
| Password generator with a live strength meter | |||||
| Vault health: weak, reused, aging | |||||
| Check against known breach corpora | |||||
| One-time share links | |||||
| MFA on vault sign-in | |||||
| Run it on infrastructure you ownIt runs on a Supabase project that is yours, not on a bundle you download from us. | |||||
| Independent security auditWe're new and haven't had one yet. It's on the roadmap, and we say so here. | |||||
| Browser extension with autofill | |||||
| Mobile apps | |||||
| Passkey sign-in | |||||
| Open-source core |
Checked on August 27, 2026, against what each product documented publicly that day. These products move fast: check each vendor's own site before you decide, and write to us if you find a row that's wrong. All trademarks belong to their respective owners, and nothing here implies an association between them and us.
Where we're different
Built for your AI, without handing it the secret
The only product in this table with an MCP server. Your agent lists vaults and creates items; when it reads a secret, the value comes back redacted. You automate the work without giving a model your team's passwords.
Developer-native
Paste a whole .env and it splits into named variables, one at a time. Config, API keys and SSH keys are first-class item types, not notes somebody typed a value into in a hurry.
European by default
European Portuguese in the interface, and your data in a Supabase database you created in a European Union region. Where it lives doesn't rest on a promise from us: it rests on where you created the project, and you can see that in your own console.
Honest about what we don't have yet
End-to-end encryption in your browser, and a roadmap we don't dress up. We say what has shipped, what comes next, and what we haven't earned the right to claim yet — an independent security audit, to start with.
Where we're early, plainly.
There's no browser extension with autofill, no mobile apps, no passkey sign-in and no independent security audit. Those are four rows in the table above, all four marked “On the roadmap,” and that's where they stay until they stop being true. If you need one of them this week, a mature product is the right choice.
Questions about this comparison
Is this really as secure as the established players?
The encryption model is the same class: zero-knowledge, keys derived in your browser, and a server that only ever stores ciphertext. The primitives are the standard ones — Argon2id to derive the key, AES-GCM for values, RSA-OAEP to hand a vault key to someone joining it. Where we're genuinely behind is track record and an independent security audit: we're new, and pretending otherwise wouldn't help either of us.
What are you missing versus 1Password or Bitwarden today?
Browser extensions with autofill, mobile apps, and passkey sign-in. They're on the roadmap; they aren't shipped. If those are must-haves this week, the incumbents win the comparison and the table says so. If an AI-ready, developer-focused vault with your data in the European Union matters more, that's where we're different.
Why would a team switch?
Three reasons, and it's always the same three: they want secrets their AI agents can use without seeing the value in the clear, they're tired of passing .env files around, and they want their data on infrastructure they own. If none of those is you, stay where you are — we mean that.