Controlled Access for your agentic lifestyle
In a world powered by AI agents, trust is everything. FortNox gives your agents the credentials to act, while ensuring they never have more than they need.
Security for the next
hundred years.
Built with Rust for performance, and memory safety for total peace of mind.
Granular Permissions
Grant your marketing agent access to X and Instagram, while keeping your banking vault completely invisible. One bridge, infinite control.
Verified Auditing
Every request from an agent is logged in a tamper-proof hash-chain. Know exactly when Claude requested a key and why, with real-time kill-switches.
Agent-Native Bridge
A dedicated MCP server built for the frontier. Your agents interact with your vault via the Model Context Protocol—secure, fast, and local.
Zero-Knowledge.
Zero-Compromise.
Your master password is the only key to your data. We never see it, and we can't reset it.
AES-256-GCM Encryption
All vault items are encrypted using AES-256-GCM. Authenticated encryption ensures your data remains immutable and private, both at rest and during sync.
Argon2id Key Derivation
We use Argon2id with per-user salting to derive your encryption keys. This provides world-class resistance against brute-force and side-channel attacks.
// fortnox-core/crypto.rs
pub fn derive_key(password: &str) -> [u8; 32] {
let params = Argon2Params {
m_cost: 65536,
t_cost: 3,
p_cost: 4
};
// Zero-knowledge derivation
Argon2::derive(password, ¶ms)
}
Experience
the Control.
Scroll to authorize agent decryption.
You define the Boundary.
The FortNox Agent Bridge validates your presence. Our protocol ensures that agents only see what you authorize, exactly when you allow it.
Agent Bridge Status
- Active Presence Check
- Temporal Credential Release
Choose your vault.
Professional security for individuals, families, and teams.
Personal
High-speed sync and advanced security for individuals.
Family
Secure your entire household and their agents.
Teams
For teams and fleets of AI agents requiring shared access.
Compatible with your ecosystem
The Sovereignty Check
Critical answers for technical users.
Can FortNox reset my master password?
No. We have zero-knowledge of your password. It is never transmitted to our servers. If you lose your password and your recovery key, your data is cryptographically unrecoverable.
Where is my data physically stored?
By default, your vault lives in an encrypted SQLite database on your local machine. If you use our Managed Sync, an encrypted blob is stored on our servers, but we cannot decrypt it.
What happens if FortNox servers go down?
Nothing. FortNox is local-first. Your desktop app, CLI, and Agent Bridge will continue to function perfectly. Sync will simply resume once connectivity is restored.