Your family’s documents,
encrypted before they leave your phone.
Aadhaar, PAN, passports, policy numbers, bank details, WiFi passwords. Organised by person, locked with a PIN that never reaches our servers — and shareable one field at a time when someone asks.
Free forever plan · No card needed to start
The Aadhaar photo in your WhatsApp is the actual problem
Every Indian family has the same pattern: scans of Aadhaar and PAN sent over WhatsApp, saved to a phone gallery, forwarded to a broker, sitting in three cloud backups you have forgotten about. Each copy is permanent, unencrypted, and outside your control.
The workaround people reach for is a folder in Google Drive. That is better than WhatsApp, but the provider can still read every file, and anyone who gets into your Google account gets everything at once.
And the request is rarely for the whole document. An agent needs your PAN number. A hotel needs one ID. A relative needs a policy number. Sending the entire scan because that is the only unit you have is how documents leak.
What you get
Encrypted in your browser, not on our server
Secrets are encrypted with AES-256-GCM using a key derived from your PIN through 250,000 rounds of PBKDF2. The encryption happens on your device before anything is uploaded. We store ciphertext we cannot read.
Organised by person and business
A profile for each family member and each business you run. Your father’s documents sit under your father, not in a shared pile you have to search through.
Share one field, not the whole document
Pick exactly which fields to share — a policy number without the password, an ID without the address. Bank-unsafe fields are excluded by default, so you cannot leak a CVV by accident.
Watermarked image sharing
When you share a scan, gocrd can stamp it with a watermark before it leaves — so a copy sent to an agent cannot quietly be reused somewhere else.
Built-in templates for Indian documents
Aadhaar, PAN, GST, MSME, passport, driving licence, voter ID, bank accounts, cards. Each opens with the right fields already laid out, with the sensitive ones marked secret by default.
Reveal that closes itself
A revealed secret hides again after 30 seconds, hides immediately if you switch tabs, and the clipboard is cleared 45 seconds after you copy. Shoulder-surfing and forgotten clipboards are real, and cheap to defend against.
Why "we cannot read it" matters more than a privacy policy
Most storage services promise not to look at your files. That is a policy, and policies change with ownership, subpoenas and breaches. End-to-end encryption is different in kind: even with full access to our database, the contents are unreadable without your PIN.
The honest trade-off is that this cuts both ways. If you forget your PIN, we cannot recover your data — there is no reset link, because a reset link would mean we had the key all along. gocrd gives you a recovery kit at setup, and you keep it somewhere physical.
Under India’s DPDP Act you have a right to your data and a right to take it with you. gocrd exports everything on request, in formats you can actually open.
Common questions
- Can gocrd staff read my documents?
- No. Anything marked secret is encrypted in your browser with a key derived from your PIN before it is uploaded. Your PIN never reaches our servers. What we store is ciphertext, and without your PIN it is unreadable to us, to an attacker with our database, and to anyone with a court order.
- What happens if I forget my PIN?
- Your encrypted data cannot be recovered — which is the necessary cost of us not being able to read it. When you set up the vault you are given a recovery kit to store physically. Without your PIN or that kit, the encrypted items are permanently unreadable.
- Is this a password manager?
- It handles passwords, but it is broader. A password manager stores logins. gocrd stores your family’s documented life: government IDs, policy numbers, bank details, WiFi passwords, business registrations — organised per person, with the ability to share individual fields safely.
- Is it safe to store Aadhaar and PAN here?
- Government ID numbers are marked secret by default in every template, so they are encrypted from the moment you save them. That is meaningfully safer than a phone gallery, a WhatsApp chat, or an ordinary cloud drive, where the file sits in plain form.
- Can I share a document with someone without giving them everything?
- Yes. You choose exactly which fields go out. Fields banks and regulators consider never-shareable are excluded automatically, and images can be watermarked on the way out.
- Can I get my data out?
- Yes, at any time, in JSON or spreadsheet form. Encrypted items are exported in a form you can decrypt with your own PIN.
More in gocrd
Family health records
Prescriptions, lab reports and medicines, separated by family member.
Read more →EMI & bill tracker
Every recurring payment in one monthly checklist, partial payments included.
Read more →Subscription tracker
Renewals for domains, hosting and software, before they auto-charge.
Read more →Start today, free
Set it up once. It keeps working quietly in the background.
Start free