Roadmap
An honest, up-to-date view of what Oscou can do today and what we're building next. Everything below is a feature, not a promise with a date — we ship it when it's ready and secure.
Shipped
17Live in the web app and browser extension today.
- Zero-knowledge encrypted vaultEverything is encrypted on your device with your master password. The server only ever holds ciphertext.
- Unlimited passwords, passkeys & notesSave as many logins, passkeys and secure notes as you like, synced across your devices.
- Credit cards & checkout autofillCards as a first-class item — number, expiry, CVV and billing address filled at checkout in a tap.
- Encrypted document storageKeep IDs, insurance papers and important files encrypted, with 1 GB free to start.
- Built-in authenticator (2FA)Two-factor codes live right beside your logins — no separate authenticator app needed.
- Web appThe full Oscou experience in the browser — vault, folders, sharing, settings and activity.
- Browser extensionAutofill, save-on-submit capture, strong-password generation and stay-signed-in convenience.
- Zero-knowledge loginYour master password never leaves your device — not even to sign in — thanks to SRP authentication.
- Secure folder sharingShare a folder and its Collection Key is sealed to each recipient's public key — only they can open it.
- Invites & permissionsInvite by email as read-only or can-edit, with accept / decline, expiry and instant revoke.
- Shared-folder activity logEvery view, copy, edit and delete in a shared folder is recorded — metadata only, private folders never logged.
- Reveal PIN — second encryption layerAn optional PIN adds a second encryption layer over your most sensitive fields — passwords, card numbers and CVVs.
- Breach monitoringWe check your passwords against known breaches using k-anonymity, so the password itself never leaves your device.
- One-tap importMove over from LastPass, 1Password, Bitwarden, Dashlane or Chrome in minutes.
- Share plan & billingUpgrade to the Share plan to bring in the people you trust — they always stay free.
- Unified Rust encryption coreOne independently auditable encryption core (Argon2id, X25519, HPKE), compiled to WebAssembly and shared by the web app and browser extension — the same audited code protects your vault everywhere.
- Guardians — emergency & legacy accessSplit your recovery key across people you trust: several must approve, and after a waiting period you can veto, before anyone gets read-only access to your vault — for emergencies and inheritance.
Planned
4On the horizon, not yet started.
- Mobile apps — iOS & AndroidNative apps with system autofill, biometric unlock and offline access.
- Desktop appsStandalone apps for macOS, Windows and Linux alongside the browser extension.
- Passkey sign-inUnlock Oscou itself with a passkey or biometrics, not just store passkeys for other sites.
- Independent security auditA third-party audit of the crypto core and apps, with the report published for everyone to read.
Start with everything that's ready today
The whole single-user experience is free, forever. The roadmap only adds to it.