Vordr: hardened offline password vault for Windows x64
Store passwords, TOTP keys, attachments and encrypted notes in a single local vault file using AES-256-GCM encryption and Argon2id key derivation. Thomas Smistad built this Windows utility to prioritise local control and a minimal runtime footprint. The app runs as one 64-bit executable with no network, telemetry, or external libraries, and includes session features like clipboard clearing and idle locking. It suits security-focused power users and developers who require offline-only storage and transparent low-level code.
What Vordr does and how it stores secrets
Vordr keeps all secrets inside one encrypted file with the extension .vordr, and it supports passwords, notes, TOTP keys, and file attachments. The vault uses AES-256-GCM for encryption and Argon2id for deriving the master key, and the app can import and export encrypted ZIP archives for data portability. The single-file model makes exporting or moving a vault a single-file operation.
How it affects system resources during use
The application is written entirely in 64-bit assembly and runs as a single executable depending only on native Windows DLLs, which keeps its footprint small. The design eliminates background processes and network clients, so there is no continuous CPU or RAM usage when the vault is closed. Runtime activity is limited to explicit sessions, which reduces background resource consumption on desktop machines.
Is it safe to use on a production machine?
Vordr operates with zero network connectivity and no telemetry, reducing remote attack surface. It offers session controls such as automatic idle locking and clipboard clearing, and it optionally uses the TPM for convenience unlock after the initial master password entry. The tool has no password reset; if the master password is lost, the encrypted vault cannot be recovered.
Does it require technical knowledge to operate correctly?
The app targets power users and developers: it requires a Windows x64 CPU with AES-NI, PCLMULQDQ, SSE4.1, and SHA-NI support to run. The assembly implementation and low-level requirements give full transparency but also require users to understand hardware prerequisites and the consequences of offline-only operation, such as manual vault backups and careful master-password management.
Best for users who accept strict hardware and recovery trade-offs
Vordr serves users who need an offline, dependency-free vault and who can meet its CPU instruction requirements. It delivers a small attack surface and clear operational model, but it imposes a strict trade-off: losing the master password means permanent loss of the vault. Choose it when local control and minimal runtime dependencies matter more than password-recovery conveniences.
