by Ferrum Arms · Personal Collection Management
Ferrum Arms

The Armory — every firearm, bow, and NFA item you own, catalogued with the same record discipline an FFL keeps in its own bound book. Serial numbers and NFA control numbers are encrypted before they ever leave your browser.

AES-256-GCMZero-KnowledgeMulti-DeviceNFA-Ready
Why The Armory

Built for the whole safe, not just the guns.

Most trackers pick one lane — encryption, estate planning, or ammo counts. This one doesn't make you choose, and it doesn't leave archery equipment out.

Zero-knowledge encryption

Serial numbers, storage locations, and NFA control numbers are encrypted with AES-256-GCM in your browser before they're ever sent anywhere.

Synced across devices

Your account, not your browser. Log in from a phone or a laptop and the collection is the same one.

Built for every item in the safe

Rifles through suppressors and SBRs, compound bows to crossbows, optics and ammo — one system instead of four apps.

Export on your terms

A clean CSV for an insurance appraisal, or a printable valuation report for an executor. Your data, your format.

What You Can Track

Fourteen categories, four groups.

Firearms
Rifle · Pistol · Revolver · Shotgun
NFA Items
Suppressor · SBR · SBS · AOW
Archery
Compound Bow · Recurve · Crossbow
Ammo & Accessories
Optic · Accessory / Part · Ammunition
How It Works

Three steps. No setup beyond a password.

01

Create your account

Email and a password — that password derives the encryption key on the spot, in your browser. Nothing else to configure.

02

Log everything you own

Rifles to receivers, suppressors to recurve bows. Photo, serial, value, condition, and NFA paperwork where it applies.

03

Carry it anywhere

Log in from any device and it's there. Pull a CSV for insurance or a printable report for an executor whenever you need one.

Security

Zero-knowledge, by design.

Your password never reaches a server. It derives an encryption key entirely in your browser — we only ever store what that key produces.

Your password never leaves your browser
It's used once, locally, to derive an AES-256 key via PBKDF2 (100,000 rounds) — the key itself is never sent anywhere.
Every sensitive field is encrypted individually
Serial numbers, storage locations, notes, and NFA control numbers — encrypted before the request is even built.
The database only ever sees ciphertext
Row Level Security also scopes every query to your account, so the two protections don't rely on each other.
There's no password reset
That's the trade-off zero-knowledge always makes. Losing your password means losing access — write it down somewhere safe.
passwordnever transmitted
kdfPBKDF2-SHA256, 100k rounds
keyheld in memory only
cipherAES-256-GCM
serial_number8f2a91e0c...4b7d (encrypted)
storedciphertext only

Start cataloguing your collection.

Free to start. Takes about two minutes.