Desktop App

Flowsta Vault

Your identity manager that runs entirely on your computer. Your private keys and recovery phrase never leave your machine.

Available for Linux, macOS and Windows.

Features

What's Inside

Everything you need for sovereign identity management, built with security as the foundation.

Flowsta Vault
Flowsta Vault desktop application

Your identity, on your machine.

Flowsta Vault runs a local Holochain conductor directly on your desktop — your private keys and recovery phrase never leave your computer.

Link your desktop identity to your web account with cryptographic attestations, and connect third-party apps with a single click.

Local-First Architecture

Flowsta Vault runs a Holochain conductor directly on your machine. Your identity data, private keys, and encrypted credentials never touch a remote server.

Offline Desktop Logins

Sign in to Holochain apps on your desktop using your Flowsta Identity — no internet connection required. Your vault links your desktop and web identities so apps recognize you everywhere.

Military-Grade Encryption

Your vault is encrypted with AES-256-GCM and your password is hashed with Argon2id — the same memory-hard algorithm used by password managers and security-critical applications.

Auto-Lock & System Tray

Configurable inactivity timeout (5 minutes to never) automatically locks your vault. Minimises to your system tray so it's always ready when you need it.

Encrypted Backups

Apps connected to your vault can store encrypted backups locally. AES-256-GCM encrypted, per-app storage limits, and you can export or delete them at any time.

24-Word Recovery Phrase

Your identity is derived from a BIP39 recovery phrase. Write it down, store it safely, and you can restore your identity on any device at any time — no account recovery process needed.

Get Started

Download Vault

Only download from GitHub

Flowsta Vault is where you enter your password and 24-word recovery phrase. Never download it from anywhere other than our official GitHub releases. A tampered version could steal your recovery phrase and take control of your identity. Always verify you are on github.com/WeAreFlowsta.

Verify your download is genuine

Each release includes a unique fingerprint. Check that your downloaded file's fingerprint matches the one on GitHub to make sure nothing was changed in transit.

Open a terminal in your downloads folder and run:

Linux / macOS: sha256sum flowsta-vault-*

Windows (PowerShell): Get-FileHash flowsta-vault-*

Compare the output to the checksum listed in the GitHub release notes. They should match exactly.

Setup

How It Works

1

Set Up Your Vault

Enter or generate a 24-word BIP39 recovery phrase and create a strong password. Your cryptographic identity is derived deterministically from this phrase — the same phrase always produces the same identity.

2

Link Your Web Account

Connect your vault to your Flowsta web account. This creates a cryptographic attestation on the Holochain identity network, proving both identities belong to the same person.

3

Connect Apps

Third-party Holochain apps can request to link to your vault identity. You see exactly what each app is requesting and approve or deny with a single click. Revoke access at any time.

4

Stay Secure

Your vault auto-locks after inactivity, minimises to the system tray, and encrypts everything at rest. Your recovery phrase and private keys never leave your machine, and are cleared from memory when the vault locks.