Create your account
Sign up on the web and pick a plan. Solo is free, and Business is available for teams on monthly or annual billing.
Security
Privacy
Zero Trust
Lumalok encrypts your secrets with AES-256-GCM before they leave your device. What we store in the database is ciphertext — unreadable without your master password, which never leaves your machine.
How it works
Three steps to a secure team.
Install the desktop app
Download Lumalok and log in. Set your master password — it stays on your machine.
Invite your team
Add members by email. Each person sets their own master password locally.
Security model
Built so that even we cannot read your secrets.
AES-256-GCM encryption on-device
PBKDF2 key derivation, 310 000 iterations
Master password never transmitted
No plaintext leaves the machine