Your passwords.
Split between you
and no one.
IkaVault is a decentralized password manager built on Solana. Keys are split 2-of-2 between you and the Ika network — no server ever holds a complete key. Vault data lives encrypted on Walrus, searchable on-chain via FHE.
Three moves between you and a vault nobody can steal.
Sign in with Google
Web3Auth derives a Solana keypair from your Google login. No seed phrase. No extension install friction.
Split-key encryption
Ika's 2PC-MPC network generates a distributed keypair with you. Neither side ever holds the full key.
Encrypted blob on Walrus
Your vault is encrypted client-side, uploaded to Walrus, pointers written to Solana. Reads pull + decrypt on-device.
What you get with IkaVault.
Autofill, on any site
Content script matches URL, fetches blob, decrypts locally, fills the form. Never more than a keystroke.
Share a credential
Re-encrypt for a recipient's dWallet pubkey. ACL on-chain. Revoke in one click.
FHE encrypted search
Search your vault without decrypting. Queries run on-chain over ciphertext via Encrypt FHE.
Cross-device, no sync server
State lives on Solana + Walrus. Install on a second device — log in — vault appears.
No master password
Your Google identity + Ika's network share replace a master password. Nothing to forget.
Built for speed
Walrus fetch ~80ms. dWallet sign ~200ms. Autofill faster than you can tab.
Four protocols. One vault.
┌────────── Browser Extension (React + TS) ─────────┐ │ Web3Auth ←→ popup ←→ background (service worker) │ │ │ │ │ ┌────────┴────────┐ │ │ ▼ ▼ │ │ Ika dWallet (2PC) Solana Program (Anchor) │ │ │ │ │ │ ▼ ▼ │ │ split-key vault PDAs │ │ encrypt/sign pointers + ACL │ │ │ │ │ │ └───────┬─────────┘ │ │ ▼ │ │ Walrus blobs │ │ (encrypted vault data) │ └─────────────────────────────────────────────────────┘
Four assumptions. Zero master secrets.
No single party can decrypt
Your vault key is split 2-of-2. Ika's network holds one share, your device holds the other. Neither alone can read your vault.
Zero-knowledge storage
Walrus stores encrypted blobs. The storage layer never sees plaintext, URLs, or usernames — just opaque bytes.
No master password to forget
Your Google identity via Web3Auth + Ika's network share replace the master password. Nothing to lose, nothing to brute-force.
You sign, chain verifies
Every vault mutation is an on-chain tx signed by the 2PC-MPC protocol. History is public, contents stay private.
Built in public, week by week.
Solana Frontier Hackathon · Apr 6 – May 11, 2026. Every commit, every week, every post-mortem in public.
- WEEK 1Apr 6 – 12Shipped
Foundation
- ›Anchor program scaffold + vault PDAs
- ›Web3Auth Google OAuth in extension
- ›Popup UI dark theme
- WEEK 2Apr 13 – 19Shipped
Core crypto
- ›Ika dWallet create/sign via gRPC
- ›Client-side encryption w/ split key
- ›Walrus upload/download wired
- WEEK 3Apr 20 – 26In progress
Flows + website
- ›Save + autofill credential flow
- ›Vault listing + search UI
- ›Marketing site on Walrus Sites
- WEEK 4Apr 27 – May 3Planned
Polish
- ›Encrypt FHE integration (stretch)
- ›Share credential flow (stretch)
- ›Edge cases + loading states
- WEEK 5May 4 – 11Planned
Submit
- ›Demo video
- ›GitHub README
- ›Colosseum submission
This site is itself decentralized.
ikavault.wal.app doesn't live on Vercel or AWS. It's a Walrus Site, content-addressed on the Walrus network, routed via @ikavault.sui (SuiNS). We dogfood the stack our users depend on.