Identity Vault

German bureaucracy consists largely of the same handful of details, over and over. Name, address, date of birth, tax ID, tax number, bank details, and for the self-employed the company name and VAT ID on top. Every authority, every portal, every form wants it afresh. The Identity Vault is the answer: you enter your master data once, and from then on the tools on Werkzeu.ge fill their forms with it themselves.

What matters is how the vault protects your data. Everything is encrypted directly in your browser. Only the unreadable authenticated envelope is stored against your account on our servers and synchronized between signed-in browsers. The password, key, and plaintext never leave your browser. Nobody but you can open the vault, us included.

The vault is organised into five areas. Personal: first and last name, street and house number, postal code and city, phone, email, marital status. Business: company name, VAT ID, trade register number, legal form. Tax and social insurance: tax class, federal state, gross annual income, birth year, child allowances, church tax liability, type of health insurance, tax ID, tax number, tax office and social insurance number. Bank details: IBAN, BIC, account holder. And identity and residence: date of birth, place of birth, nationality and residence permit.

These are exactly the fields that get needed again and again. Current integrations include Formularamt, several tax and salary tools, cancellation letters, the letterhead designer, and the legal-notice generator. They take matching details only after your approval instead of making you retype them. That saves time and prevents transposed digits in the IBAN or the eleven-digit tax ID.

The vault can be locked and unlocked. As long as it is locked, your data is encrypted and unreadable to anyone, including any other tool. To edit or pre-fill you briefly unlock it with your password. Afterwards you can lock it again with one click, for example when you are on a shared computer.

The encrypted envelope remains in your account even if you change browsers or clear local storage. After signing in, you can open it again with the separate Amtsprofil password. We do not know that password. If you lose it, the envelope cannot be decrypted and you must delete and refill the Amtsprofil.