Your keys. Your vault. Your terms.
PIZ is a peer-to-peer vault. Store your secrets, credentials, and personal details, then share one public code. When someone requests access, you decide item by item what to reveal — and revoke it anytime. The server only ever sees ciphertext.
- E2E
- Encrypted in your browser
- P2P
- Owner-to-recipient exchange
- 0
- Plaintext the server can read
piz.codes/p/atlas
Scan to request access. Public and safe to share — it carries only a handle and a public key, never a secret.
A request-and-grant handshake you fully control
Sharing on PIZ is never all-or-nothing and never automatic. Every exchange is a deliberate handshake between two people.
- 01
Publish your code
Your vault gets one public QR identity. Print it, link it, drop it in a bio. It exposes only your handle and public key.
- 02
Receive a request
Someone scans your code and asks for access, presenting their own public key. Nothing is shared yet.
- 03
Grant, item by item
You choose exactly what to reveal — bank details, a payment link, an ID — with an optional expiry. Keys are wrapped to that person alone.
- 04
Revoke anytime
Pull a whole grant or a single item. Access stops immediately, enforced on the server and cryptographically.
We built PIZ so we can’t betray you
Most vaults ask you to trust a company. PIZ removes the company from the equation. Everything sensitive is encrypted before it ever leaves your browser, so a breach, a subpoena, or a rogue employee finds only noise.
// what the server stores
item: "9f3a…c71b" (ciphertext)
key: "wrapped→recipient_pk"
plaintext: null
Keys never leave your device
A master passphrase derives your key and unwraps your private key locally. We store the wrapped version — useless without the passphrase we never see.
The server is blind
PIZ relays ciphertext and metadata only. It cannot read an item, forge a grant, or decrypt on your behalf. Privacy is owned by each end.
Sharing is cryptographic
Granting wraps each item’s key to the recipient’s public key with vetted primitives — AES-GCM, PBKDF2, and RSA-OAEP. No hand-rolled ciphers.
One vault for everything worth protecting
Organize what matters, then share it on your terms through the same request-and-grant handshake.
Personal information
Store IDs, addresses, and contact details as encrypted items you can hand over selectively.
Bank & payment details
Keep account numbers and cards in the vault and share them only with a scoped, revocable grant.
Payment links
Attach a payment link to a grant so a recipient can pay you without ever exposing the rest of your vault.
Issue API keys
Mint scoped, show-once keys for programmatic access. Stored only as a hash, revocable on demand.
Connected accounts
Save credentials for Stripe, banking apps, and sites — with live Stripe Connect landing as the first integration.
Expiring grants
Set an expiry on any grant. Access ends on its own, no cleanup required.
Claim your handle and put your privacy back in your hands
Create a vault, generate your public code, and start sharing on your terms. It takes a minute, and the keys stay yours.