TARS

Sign in with your phone. Your vault stays encrypted on your own infrastructure.