LockHarbor · Last updated 13 August 2026
By installing or using LockHarbor ("the app") you agree to these terms. If you do not agree, please do not use the app.
LockHarbor is a password manager that stores your data in encrypted form on your own device. It is provided as a standalone application. There is no account, no hosted service, and no server component operated by us that holds your data.
We cannot recover your data under any circumstances. We hold no copy of your vault, your master password, or your recovery key, and we have no technical means of resetting or retrieving any of them.
If you forget your master password and lose your recovery key, and you have no backup file, your data is permanently inaccessible. Keeping backups is your responsibility.
You are responsible for choosing a strong master password, for storing your recovery key somewhere safe and separate from your device, for keeping backups, and for the security of the device itself — including its screen lock and any software installed on it.
You agree not to use the app to store or manage credentials you are not authorised to hold, or for any unlawful purpose. You agree not to attempt to use the app to gain unauthorised access to any system or account.
The app is provided "as is" and without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement.
Specifically, and stated plainly rather than buried: we do not warrant that the app is free of defects, that it will operate without interruption, or that its security cannot be defeated. LockHarbor has not undergone an external security audit. It uses established, published cryptographic algorithms through maintained libraries, but that is a description of its construction, not a guarantee of outcome.
To the maximum extent permitted by applicable law, we shall not be liable for any indirect, incidental, special, consequential or punitive damages, or for any loss of data, loss of access to accounts, or loss of profits, arising out of or relating to your use of or inability to use the app — including data loss resulting from a forgotten master password, a lost recovery key, an absent backup, device failure, device loss, or a defect in the app.
The app includes one optional feature that contacts a third-party service: the breach check, which queries the Have I Been Pwned Pwned Passwords API. It is disabled unless you enable it. That service is operated independently of us and governed by its own terms; we make no representations about it. See the Privacy Policy for exactly what is sent.
The app can produce encrypted backups and unencrypted plain-text exports at your request. Once you export and share a file, its security is entirely in your hands. A plain-text export contains your passwords in readable form and is offered only for moving your data elsewhere.
The app may change over time, and features may be added, altered or removed. These terms may be updated; the date at the top will change when they are. Continued use after a change constitutes acceptance of the updated terms.