Roadmap

An honest, up-to-date view of what Oscou can do today and what we're building next. Everything below is a feature, not a promise with a date — we ship it when it's ready and secure.

Shipped

17

Live in the web app and browser extension today.

  • Zero-knowledge encrypted vaultEverything is encrypted on your device with your master password. The server only ever holds ciphertext.
  • Unlimited passwords, passkeys & notesSave as many logins, passkeys and secure notes as you like, synced across your devices.
  • Credit cards & checkout autofillCards as a first-class item — number, expiry, CVV and billing address filled at checkout in a tap.
  • Encrypted document storageKeep IDs, insurance papers and important files encrypted, with 1 GB free to start.
  • Built-in authenticator (2FA)Two-factor codes live right beside your logins — no separate authenticator app needed.
  • Web appThe full Oscou experience in the browser — vault, folders, sharing, settings and activity.
  • Browser extensionAutofill, save-on-submit capture, strong-password generation and stay-signed-in convenience.
  • Zero-knowledge loginYour master password never leaves your device — not even to sign in — thanks to SRP authentication.
  • Secure folder sharingShare a folder and its Collection Key is sealed to each recipient's public key — only they can open it.
  • Invites & permissionsInvite by email as read-only or can-edit, with accept / decline, expiry and instant revoke.
  • Shared-folder activity logEvery view, copy, edit and delete in a shared folder is recorded — metadata only, private folders never logged.
  • Reveal PIN — second encryption layerAn optional PIN adds a second encryption layer over your most sensitive fields — passwords, card numbers and CVVs.
  • Breach monitoringWe check your passwords against known breaches using k-anonymity, so the password itself never leaves your device.
  • One-tap importMove over from LastPass, 1Password, Bitwarden, Dashlane or Chrome in minutes.
  • Share plan & billingUpgrade to the Share plan to bring in the people you trust — they always stay free.
  • Unified Rust encryption coreOne independently auditable encryption core (Argon2id, X25519, HPKE), compiled to WebAssembly and shared by the web app and browser extension — the same audited code protects your vault everywhere.
  • Guardians — emergency & legacy accessSplit your recovery key across people you trust: several must approve, and after a waiting period you can veto, before anyone gets read-only access to your vault — for emergencies and inheritance.

Planned

4

On the horizon, not yet started.

  • Mobile apps — iOS & AndroidNative apps with system autofill, biometric unlock and offline access.
  • Desktop appsStandalone apps for macOS, Windows and Linux alongside the browser extension.
  • Passkey sign-inUnlock Oscou itself with a passkey or biometrics, not just store passkeys for other sites.
  • Independent security auditA third-party audit of the crypto core and apps, with the report published for everyone to read.

Start with everything that's ready today

The whole single-user experience is free, forever. The roadmap only adds to it.