Password Wallet
A password manager that works like MEGA Pass or Bitwarden: your credentials are encrypted on your device with a key derived from your master password. Our servers only ever receive ciphertext - we could not read your vault even if we wanted to.
- Free forever - Up to 500 logins, 2FA codes, notes, cards, identities and recovery codes
- Built-in authenticator - Live 6-digit 2FA codes right in your vault
- Security audit - Weak, reused, leaked (checked privately against Have I Been Pwned) and year-old passwords flagged
- One-click saves from the password generator, imports from Chrome, Firefox, Bitwarden and LastPass
- Encrypted backups, optional login 2FA and configurable auto-lock
Each item is sealed with authenticated encryption before it leaves your browser.
Your master password becomes two keys: one encrypts locally, one authenticates. Only the second is ever transmitted.
Weak and reused passwords are flagged automatically - Fix them with one click using the built-in generator.
We cannot reset your master password, because we never have it. Choose a memorable passphrase and keep it safe.
Unlock your vault
You'll land straight in your dashboard.
Continue with GoogleHow Zero-Knowledge Works Here
1. Keys are derived locally
Your master password is stretched with PBKDF2-SHA256 into 512 bits. Half becomes your vault key, half becomes a login token. The vault key never leaves the page.
2. Items are sealed before upload
Every login, note and card is serialized and encrypted with AES-256-GCM in your browser. The server stores an opaque blob it cannot parse.
3. The server verifies, never reads
We store a hash of your login token to authenticate you - The same model used by MEGA Pass and Bitwarden. A database leak would expose only ciphertext.
Want the background? Read our guides on whether you need a password manager, AES-256 encryption and choosing a strong master password.