One Sharkflow account
A locker for you. A harbour for your team.
Davy Jones is a password manager that encrypts everything on your device. Harbour is where your organization shares vaults and keeps its secrets. One sign-in opens both.
Davy Jones · For you
Everything you sign in with, sealed on your device.
Davy Jones’ Locker is a personal password manager. Your vault is encrypted in your browser before it’s saved, with keys only you hold, so our servers store contents they can’t read.
- You unlock with your master password, on your device.
- Items are encrypted before they leave it.
- Your Emergency Kit holds your recovery details. We can’t recover them for you, so keep it offline.
Passwords and passkeys
Logins and passkeys for the sites you use, kept together in one vault.
Cards and secure notes
Payment cards, and the notes you would never leave in a text file.
Two-factor codes
Add a site’s authenticator by QR code or setup key and get its codes next to the password.
Password generator
Long random passwords, or memorable passphrases, with a strength check as you go.
Watchtower
Flags weak, reused and breached passwords. The breach check sends only a short hash prefix, never the password.
Import and export
Bring logins over from a CSV export, encrypted as they arrive. Export your vault when you want.
Davy Jones runs in your browser today. Apps for iPhone, Mac and Android, and a browser extension, are in development.
Harbour · For your organization
Shared vaults, sealed secrets and a clear record.
Harbour brings your people into one organization with the access each of them needs, and nothing more. The vault your team shares is encrypted the same way as your own.
Open HarbourMembers and roles
Invite people to your organization as an owner, admin, editor or viewer.
Team vaults
Shared vaults use the same on-device encryption. A role alone doesn’t open one: its key is shared with each member.
App manager
Register your organization’s apps, keep each one’s secrets by environment, and sign people in once an app is approved.
Organization secrets
Write-only. Add, replace or revoke a value, and nobody sees it again after it’s saved.
Activity log
A record of who invited, changed or revoked what, and when.
Server access: a sign-in for each app environment, so your servers fetch their own secrets. It’s being built now and isn’t available yet.
Powered by Shark Auth
One sign-in, wherever Sharkflow goes.
The same account opens Davy Jones and Harbour, and signs you in to other Sharkflow apps such as Journal and Forge.
Passkeys first
Sign in with a passkey, with an authenticator app and recovery codes as backup.
Signing in isn’t unlocking
Your account proves who you are. Your master password unlocks your vault on your device, and resetting a sign-in never opens it.
Apps never see your password
Journal, Forge and other Sharkflow apps receive your sign-in, not your password.
Sessions you control
See where you’re signed in and sign a device out from account security.