Password Manager

The zero-knowledge password manager built for developers

PassCryp is an end-to-end encrypted vault for passwords, API keys, secure notes, TOTP codes and credit cards. AES-256-GCM with Argon2id. Free tier, unlimited devices, no credit card.

100 items free forever · No credit card · Import from any password manager

Zero-knowledge by design

Your master password never leaves your device. Argon2id derives the vault key locally, AES-256-GCM encrypts every item. We see ciphertext — nothing else.

Dedicated API key vault

Store AWS, Stripe, OpenAI, GitHub, and other developer keys with expiry alerts. Stop losing keys in .env files and Slack DMs.

Credit card vault

Card numbers encrypted client-side, auto-clear clipboard after 30 seconds, and a fast autofill from the browser extension.

TOTP 2FA built in

Authenticator seeds are encrypted alongside your passwords. Unlock once, copy codes with one tap.

Browser extension

Open-source extension for Chrome, Edge, Brave. Autofill anywhere, generate strong passwords, never expose the master password.

Breach monitoring

Every saved password is checked against Have I Been Pwned via k-anonymity. Only the first 5 chars of the hash ever leave your device.

Built for developers

Import from any major manager. Encrypted JSON export. CLI in beta. Open browser extension. No lock-in.

Free forever, no credit card

100 items, unlimited devices, every feature except the API key and card vaults. Premium is $2.99/month when you need more.

What is a password manager?

A password manager is an encrypted vault that stores every login you use, generates strong unique passwords for each site, and fills them automatically when you sign in. The good ones — like PassCryp — never see your master password and cannot decrypt your data, even if their servers are compromised. That is the entire point: a single strong password unlocks a vault no one else can read.

In 2026, every credible password manager uses end-to-end encryption. The differences are in the cryptography (AES-256-GCM with Argon2id is the modern standard), the trust model (zero-knowledge means the provider literally cannot read your vault), and the breadth of what you can store. PassCryp covers passwords, secure notes, credit cards, TOTP 2FA codes, and developer credentials like API keys and SSH keys.

Why PassCryp is different

Most password managers were designed before API keys, .env files, and Stripe webhooks existed. They treat secrets as a long list of website logins. PassCryp adds first-class storage for the credentials developers actually deal with: AWS access keys with expiry alerts, GitHub PATs, OpenAI API keys, database connection strings, and SSH private keys — all in the same zero-knowledge vault as your normal logins.

Underneath, the crypto stack is current: AES-256-GCM (authenticated encryption, hardware-accelerated) with Argon2id key derivation (memory-hard, resists GPU and ASIC brute force). The browser extension is open source, the security model is documented in a public whitepaper, and every dependency that touches cryptography is pinned and reviewed.

How to choose a password manager

Check four things. First, the encryption: AES-256-GCM with Argon2id or scrypt is the 2026 standard; PBKDF2 is legacy and brute-forces faster offline. Second, the trust model: a true zero-knowledge manager cannot read your vault — confirm this in the security docs, not just the marketing. Third, the device count and feature gating on the free plan: many "free" managers cripple sync; PassCryp does not. Fourth, the import story: you should be able to migrate from your current tool in under five minutes.

Frequently asked questions

What makes PassCryp a zero-knowledge password manager?

Your master password never leaves your device. PassCryp derives the vault key locally with Argon2id and encrypts every item with AES-256-GCM. The server stores ciphertext only — we cannot read your vault.

Is PassCryp free?

Yes. The free plan covers 100 items, the browser extension, password generator, breach checks, TOTP, and unlimited devices. Premium is $2.99/month for 200 items, API keys, and the credit card vault.

Can I import from LastPass, 1Password, or Bitwarden?

Yes — PassCryp imports from LastPass CSV, 1Password 1pux, Bitwarden JSON, Keeper, Dashlane, NordPass and generic CSV. Field mapping is automatic.

Does PassCryp store API keys?

Premium includes a dedicated API key vault with expiry alerts for AWS, Stripe, OpenAI, GitHub and other developer keys.

What happens if I forget my master password?

We cannot reset it. You can recover access via your one-time recovery kit, generated at signup. Without master password or recovery kit, the vault is unrecoverable by design.

Is PassCryp safe to use on mobile?

Yes — the web vault is mobile-optimized and installable as a PWA. A native mobile app is on the roadmap.

Does PassCryp support TOTP 2FA?

Yes. TOTP seeds are stored encrypted in the vault and codes generate locally — we never see plaintext seeds.

How does PassCryp compare to 1Password and Bitwarden?

PassCryp uses AES-256-GCM + Argon2id (modern, memory-hard), adds a dedicated API key vault, and prices lower than 1Password. Compared to Bitwarden, the crypto stack is more modern and developer features are first-class.

Start your zero-knowledge vault

Free forever. No credit card. Import from any password manager.

Get started free