Nottana: Password Manager

Nottana is a zero-knowledge password manager and encrypted personal data vault on decentralized storage. Your passwords, notes, credit cards, 2FA secrets, passkeys, and files are encrypted on your device with a key only you control — then stored on distributed infrastructure designed to keep your data private even from us. We don’t have the keys. We can’t read your vault. We can’t recover it for you. That is the architecture. KEY FEATURES • Zero-knowledge encryption — your master password never leaves your device. Login uses a one-way cryptographic derivation that cannot be reversed. We never see your vault contents in any readable form. •. AES-256-GCM client-side encryption — every password, note, credit card, attachment, 2FA secret, and passkey in your vault is encrypted on your device before it is uploaded. • Distributed encrypted storage — vault data is stored on encrypted, distributed infrastructure so a compromise of our servers cannot expose your decrypted data. Only the encryption key on your device can decrypt your vault. •. Biometric unlock — Face ID, Touch ID, or device biometrics unlock your vault locally on iOS and Android. Biometric data never leaves your device; only standard WebAuthn credentials are stored on our servers. •. Passkey support — store passkeys in your encrypted vault. Use them on iOS, Android, and Chrome desktop. The Android and iOS apps act as native passkey providers, so saved passkeys appear in the system credential sheet when you sign in to a passkey-enabled site or app. Chrome desktop integrates via the Nottana browser extension. •. Built-in 2FA / TOTP — store time-based one-time-code secrets for accounts that require two-factor authentication. No separate authenticator app needed. •. Credit card storage — securely save payment cards in your vault and autofill them in the apps and browsers that support it. •. Encrypted file attachments — store sensitive documents, recovery codes, and IDs in your vault. Files are encrypted client-side with the same zero-knowledge architecture. •. TowerCheck security audit — a five-point health check that runs entirely in your browser. Find weak, reused, and old passwords; expiring API keys and credit cards; and duplicate items. Results stay on your device. •. Encrypted sharing — share individual items with specific recipients. Share keys are derived from share tokens on your device; the recipient decrypts on theirs. Revoke any share at any time. •. Cross-platform — vault stays in sync across iOS, Android, web (app.nottana.com), and the Nottana Chrome browser extension. DEVICE REQUIREMENTS: • Autofill in apps and browsers requires Android 8.0 or newer. • Passkey support requires Android 14 or newer. BUILT FOR PRIVACY-FIRST USERS Nottana is engineered so the company itself cannot become a single point of access to your data. A breach of our servers, a subpoena, or a rogue employee cannot reveal your vault contents — they are encrypted with a key only your device holds. We protect your data with cryptography, not promises. PRICING Try free for 14 days. After that, choose a monthly or annual subscription to unlock unlimited items, sharing, TowerCheck, attachments, and TOTP. Cancel anytime in Google Play. ABOUT NOTTANA Built in Los Angeles, California. Independent, founder-owned, not venture-funded. We make money from subscriptions, not from selling, mining, or analyzing your data. Learn more at https://nottana.com
Privacy policy: https://app.nottana.com/privacy-policy