UnseenDesk
Zero-knowledge · Free for life for early adopters

Your private digital office, sealed before it leaves your hands.

UnseenDesk fuses precision finance, check printing, a private encrypted vault, secure sharing, layered login security, and on-device intelligence into one seamless application. Every record is encrypted on your device with keys only you hold — the server receives ciphertext, and nothing else.

Claim free-for-life access Log in to the app
Client-side AES-256-GCM Passphrase never leaves your device Developed in the USA Hosted on US-based computers
Limited-time launch privilege Free forever if you start now. Open an account and save at least one vault record (account, vault item, note, or file) to enjoy UnseenDesk free for life. Paid plans begin on 01/01/2027 or sooner. Activate now and avoid paying forever.
Cryptography first

Zero-knowledge security, engineered without compromise

Your master passphrase never leaves the browser. UnseenDesk derives separate authentication and encryption keys on your device, seals every record with AES-256-GCM, and hands the server nothing but opaque ciphertext. There is no master key on our side — by design, there never can be.

Passphrase PBKDF2-SHA256 310k iterations Auth key AES key Ciphertext Browser only Per-user salt HKDF split No passphrase recovery · Reports computed after local decrypt · HTTPS + strict CSP

What the server never sees

  • Your master passphrase or raw encryption keys
  • Decrypted account names, transaction amounts, check payees, or vault record contents
  • Plaintext filenames or MIME types for encrypted attachments

Defense in depth

  • HttpOnly, SameSite=Strict session cookies
  • Strict Content Security Policy and self-hosted assets
  • Encrypted file blobs on disk; API responses never cached by the service worker

Layered login security

  • Add a PIN, authenticator-app codes, or passkeys and hardware security keys on top of your master passphrase
  • Recovery codes, trusted devices, email security alerts, and Recent Activity for your latest sign-ins — none of it weakens vault encryption
310kPBKDF2 key-derivation iterations
256-bitAES-GCM record encryption
0Plaintext records stored server-side
100%Engineered & hosted in the USA
American craftsmanship

Designed, engineered, and hosted exclusively in the USA

UnseenDesk is developed entirely in the United States, and customer data lives on computers physically located in the United States. Your encrypted vault never leaves US-based infrastructure under normal operation — no offshore contractors, no foreign data centers.

Developed in the USA · Hosted on US-based computers Every line of code and every byte of your encrypted data stays on American soil.

100% US development

Product design, application code, and ongoing engineering are performed in the United States by a US-based team.

100% US data hosting

Production databases, encrypted file storage, and application servers run on computers physically located in the United States.

Designed for ISO 27001 & SOC 2

Security controls, logging, access boundaries, and operational practices are built with ISO 27001 and SOC 2 compatibility in mind — including zero-knowledge encryption, session protections, and user-controlled audit history.

Certification status. UnseenDesk is not yet certified to ISO 27001 or SOC 2. The platform is intentionally designed to align with those frameworks, and formal certification is planned for the near future.
One encrypted workspace

Every instrument of a private office, in one place

From daily finance to lifelong document custody, UnseenDesk brings the full product — vault, checkbook, sharing, previews, and tools — into a single refined application that works wherever you do.

Dashboard & search

Open to account, transaction, volume, and pending KPIs, your recent activity, and a Quick entry shortcut. Search executes on your device, after local decryption — never on the server.

  • Global Search sweeps accounts, transactions, checks, and collaboration history
  • Vault search scans titles and previews in My Vault or Shared With Me, scoped to your current folder unless you widen it to the entire vault — with one-tap Clear Search
  • Pending-account alerts when transactions reference names you have not saved yet
Dashboard Search Finance Vault
12Accounts
148Transactions
2Pending

Finance · Accounts

A searchable, encrypted directory of every institution you touch — bank details, routing numbers, SWIFT, Zelle, online credentials, security questions, custom fields, and currency.

  • Share Record Access, Send Raw Information, Move to Folder, and collaboration history
  • Bank and company logos plus a website favicon on every account card
  • Per-account checkbook settings when you enable check printing

Finance · Activity & reports

Record transfers with from/to accounts, amounts, currencies, dates, methods, comments, and attachments — then analyze everything locally, after decryption.

  • KPIs, net position, monthly volume, method totals, and a filterable ledger
  • CSV export and account-directory copy or share

Checkbook & printing

Write checks, keep a searchable register, block duplicate check numbers, and print with bank-grade MICR, amount-to-words, signatures, stubs, and logos.

  • Per-account next check number and void messages
  • Check Layout Studio for WYSIWYG field placement, plus vault-wide defaults

Encrypted vault

Eight record types in one elegant tree: Login, Encrypted note, File, Account, Payment card, Identity card, Crypto wallet, and Contact — with folders that share as a unit.

  • My Vault and Shared With Me, in list or thumbnail view
  • Custom fields, masked secrets, markdown notes, and described attachments on every record
  • Encrypted front and back photos on payment and identity cards with on-device OCR capture, plus contact photos and automatic site icons

Files, previews & media

Store images, PDFs, Office documents, text, audio, and video as encrypted vault files or record attachments — decrypted only on your screen.

  • Open Preview fills the app window; Download and Share use your device natively
  • Full-screen media gallery with swipe and keyboard navigation
  • Every file encrypted before upload, with storage-quota awareness

Sharing & collaboration

Share records and folders with other vault users as viewer or editor through wrapped record keys — the server can never read what you share.

  • Share Record Access for ongoing encrypted access, including entire folder trees
  • Send Raw Information through the device share sheet, with sensitive fields off by default
  • Human verification codes before a first share, and optional Vault Audit History with before/after values and field rollback

Tools & encrypted history

A suite of precision instruments that run entirely on your device, with Quick Save into encrypted, searchable history.

  • Password Generator with strength meter and character-set control
  • IP Information for your address or any host you look up
  • Card Information Lookup with issuer detail and a Luhn check
  • Code Scanner for QR codes, barcodes, and ID barcodes — decoded locally, never uploaded

Login security

The master passphrase remains the only key that decrypts your vault. Layer sign-in protection on top — it strengthens the door without ever copying the key.

  • PIN, authenticator-app TOTP, and WebAuthn passkeys or hardware security keys
  • Recovery codes, 90-day trusted devices, email security alerts, and Recent Activity

Settings & backup

Refine your workspace: display name, email, time zone, encrypted profile picture, System/Light/Dark themes, and Liquid Glass styling.

  • Encrypted backup or plaintext export with per-section selection
  • Change username or passphrase with a full cryptographic key rewrap
  • Vault-wide check printing defaults and the Check Layout Studio
My Vault Shared With Me Thumbnails
Login · Cloud providerEncrypted
Note · Estate planMarkdown
Payment card · TravelMasked
Identity card · LicensePhotos
Contact · Family officeCustom fields

A vault that understands what it holds

Each record type is purpose-built: payment cards mask their numbers and carry photos, identity documents track issue and expiry dates, crypto wallets guard recovery phrases, and contacts wear their own portraits in the tree.

  • Automatic website icons on logins, cards, wallets, contacts, and accounts
  • Search that respects your folder context, with instant Clear Search
  • Optional Vault Audit History — an encrypted, field-level change ledger only you can read

An installable private office

UnseenDesk is a Progressive Web App: install it on desktop or mobile, lock the vault the moment you step away, and work in System, Light, or Dark theme with optional Liquid Glass styling.

  • In-app Vision, Feedback, Privacy, and Terms
  • Invitation setup uses an opaque link; passphrase creation happens only on the secure app
  • Offline app shell — encrypted data itself is never cached
Tools History
Password GeneratorOn device
IP InformationLookup
Card Information LookupBIN + Luhn
Code ScannerQR · barcode · ID

Take your seat in the private digital office

UnseenDesk is currently available by invitation. Request access, get notified when signup opens, or sign in if you already hold an account.

Founding-member privilege Free forever if you start now. Open an account and save at least one vault record (account, vault item, note, or file) to enjoy UnseenDesk free for life. Paid plans begin on 01/01/2027 or sooner. Activate now and avoid paying forever.
Sign up or request access Contact us Log in