You do everything right. You generate complex strings of gibberish, you use a password manager, and you pay your annual subscription to a sleek tech company promising military-grade encryption. You feel safe. And then, inevitably, the breach email arrives.
We’ve seen this movie play out too many times. A major password manager gets hacked, and we later find out that, oops, some fields weren’t actually encrypted, or metadata was left exposed for anyone to scrape. You trusted them with the keys to your digital life, and they left the back door wide open.
Security cannot exist where the business model requires harvesting your data.
The problem isn’t just bad code or sophisticated hackers. The real threat is the architecture itself. When a password manager takes venture capital or private equity money, they aren’t just taking cash; they are signing a contract to scale, grow, and extract value at all costs. That growth demands features, dashboards, and analytics—all of which require moving your data to their servers. They build massive, centralized honeypots because their financial backers demand a return on investment.
Venture capital is fundamentally incompatible with security infrastructure. You cannot serve two masters: you either protect the user’s data absolutely, or you monetize it to satisfy your investors.
The cloud-based password manager is a lie. It trades absolute security for the convenience of a centralized server. But what if we didn’t need the server at all?
This is the exact frustration that led to the creation of Bramble, an open-source, local-first password manager that completely eliminates the cloud. Instead of storing your vault on some AWS instance waiting to be breached, Bramble uses a peer-to-peer (P2P) sync.
Here is how the magic works: Bramble uses a Nostr relay—which you can even self-host—simply to introduce your devices to each other. Once they shake hands, the data flows directly between your phone and your laptop over WebRTC. There is no vault server. There is no cloud copy of your passwords sitting in a data center. What leaves your device is end-to-end encrypted, and your devices authenticate each other directly. A snooping relay gets absolutely nothing.
If your passwords live on a server you don’t control, you don’t own your security. You’re just renting it from a honeypot.
The cryptography is handled entirely in Rust, ensuring that key material is strictly controlled and secrets are zeroed out of memory. No gigabytes of data leaving copies lying around. It even runs flawlessly on GrapheneOS without touching a single Google Play API, because true security means owning your device, too.
We have accepted a broken paradigm for too long. We let big tech companies mediate our most important data, treating our credentials as monetizable assets on a balance sheet. It’s time to stop paying companies to lose your passwords. The future of security isn’t a better cloud—it’s no cloud at all.
FAQ
Q: Isn't P2P sync clunky and hard to set up for the average user?
A: Not anymore. Using a Nostr relay for device discovery and WebRTC for direct data transfer makes the process seamless. The relay just acts as a matchmaker; your devices do the actual syncing directly and securely.
Q: What happens if I lose all my devices at once?
A: Like any local-first system, you need a backup strategy. Because the data is fully encrypted and local, you can manually export and store an encrypted backup in a secure physical location. The responsibility shifts from a corporation to you.
Q: Are you saying all VC-backed security tools are compromised?
A: Fundamentally, yes. The mandate of venture capital is exponential growth and high returns. That pressure inevitably pushes security companies to build centralized infrastructure, collect metadata, and create features that require accessing user data—turning them into targets.