New Tab · Dark Theme
Keep your personal browsing safe from anyone who uses the same computer. One master password locks your entire digital life.
New Tab · Dark Theme
Built from the ground up for privacy without sacrificing comfort.
OffShore uses Vault v2 — a dual-layer encryption system that runs entirely on your device. Your master password is hashed with PBKDF2-HMAC-SHA512 (600,000 iterations) to derive a 64-byte master key, which is then split into independent domain subkeys via HKDF: one key for cookies, one for storage, one for settings, one for verification. Each encrypted blob is tagged with AES-256-GCM authentication data (AAD) that ties it to its domain — a cookie file cannot be swapped in place of a history file.
A second encryption layer with an app-level key (PBKDF2, 200,000 iterations) protects the profile metadata itself, so not even the file structure reveals your username or profile without the app context. All files use a versioned binary format with magic bytes for integrity checking.
This is not a VPN, a proxy, or a network tunnel. Your internet traffic is not routed through any server. OffShore protects what is stored on your computer — not what happens between your computer and the internet. It is a local data protection tool, not an anonymity solution.
Simple setup, powerful protection.
Free. Always. No subscription, no account required.
Questions, feedback, or bug reports? We'd love to hear from you.
You can also email us directly at [email protected]