Your passwords,
truly private.
Everything you need to stay secure
A complete password manager and 2FA authenticator, built with security-first principles.
Password Vault
Store unlimited passwords, logins, and secure notes. All encrypted on your device before syncing.
2FA Authenticator
Generate time-based codes for two-factor authentication. Scan QR codes or enter secrets manually.
Secure Sharing
Share passwords with family or team members using end-to-end encryption. Revoke access anytime.
Cross-Platform
Access your vault from any device. Works on desktop, mobile, and as a progressive web app.
Instant Sync
Changes sync across all your devices in real-time. Your vault is always up to date.
Zero-Knowledge
We can never see your passwords. Your master password never leaves your device.
We can't read your passwords. By design.
Your data is encrypted on your device before it ever reaches our servers. We never have access to your master password or decryption keys.
You enter your password
Your master password is used to derive encryption keys locally on your device.
Everything is encrypted
Your passwords are encrypted with military-grade algorithms before leaving your device.
What we store vs. what you keep
We NEVER have access to:
- Your master password
- Your decryption keys
- Your plaintext passwords
- Your 2FA secrets
We only store:
- Encrypted vault data (unreadable)
- Authentication hash (not your password)
- Your email address
- Encrypted sharing metadata
Important: We cannot recover your vault
If you forget your master password, we cannot help you recover your data. This is by design — it's what makes zero-knowledge encryption truly secure. Please store your master password in a safe place.
Simple, transparent pricing
Start free, upgrade when you need more. No hidden fees, no surprises.
Free
Perfect for personal use
- Unlimited passwords
- Unlimited 2FA codes
- Cross-device sync
- Secure sharing (2 users)
- Browser extension
- Mobile apps
Pro
For power users and families
- Everything in Free
- Unlimited sharing
- Priority support
- Advanced security reports
- Password health check
- Dark web monitoring
Team
For teams and organizations
- Everything in Pro
- Admin dashboard
- Team management
- Audit logs
- SSO integration
- Dedicated support
30-day money-back guarantee · Cancel anytime
Frequently asked questions
Everything you need to know about PassMgr and our security practices.
What is zero-knowledge encryption?
Zero-knowledge encryption means your data is encrypted on your device before being sent to our servers. We never have access to your master password or decryption keys. Even if our servers were compromised, attackers would only find encrypted data that is useless without your master password.
What happens if I forget my master password?
Unfortunately, we cannot help you recover your vault if you forget your master password. This is by design — it's what makes zero-knowledge encryption truly secure. We recommend storing your master password in a safe place, like a physical safe or with a trusted family member.
How does secure sharing work?
When you share a password with someone, we use public-key cryptography (X25519). The item is encrypted specifically for the recipient using their public key. Only they can decrypt it with their private key. If you revoke access, they can no longer access future updates.
Can PassMgr employees see my passwords?
No, never. Your passwords are encrypted with keys derived from your master password, which never leaves your device. Our servers only store encrypted data. Even under legal pressure, we could not provide your plaintext passwords because we simply do not have them.
What encryption does PassMgr use?
We use industry-standard cryptographic primitives: scrypt or Argon2id for key derivation, XChaCha20-Poly1305 for symmetric encryption, and X25519 for key exchange. All encryption happens client-side using the Web Crypto API and proven libraries.
Is PassMgr open source?
Our security architecture and cryptographic design are fully documented. We believe in transparency — you can review exactly how your data is protected. The client-side encryption code can be inspected in your browser.
Can I use PassMgr offline?
Yes! PassMgr is a Progressive Web App (PWA) that caches static assets for offline use. Your encrypted vault can be stored locally for offline access. Note that syncing requires an internet connection.
How do I migrate from another password manager?
We support importing from most major password managers including LastPass, 1Password, Bitwarden, and browser password managers. You can export your data in CSV or JSON format and import it directly into PassMgr.
Ready to take control of your digital security?
Join thousands of users who trust PassMgr to keep their passwords safe. Start free today — no credit card required.