A Secure Password Vault for Everything

A paper notebook is single-device, unsearchable, and a security disaster the moment it's lost. A browser-built-in manager (Chrome, Safari) is OK for casual use but lacks strong key derivation, cross-browser sync, and breach monitoring.

A dedicated encrypted vault gives you: cryptographic randomness for password generation, instant cross-device sync, breach monitoring against the HIBP database, and structured fields for non-password secrets (API keys, TOTP, cards). All while keeping the encryption guarantees that browsers don't quite reach.

Transport: TLS protects data between your browser and our servers. Standard, table-stakes.

At-rest in our database: every column with a secret is encrypted with AES-256-GCM. The database operator cannot read your data even with full DB access.

End-to-end: encryption happens in your browser before any sync. The plaintext exists only in the memory of devices you've actively unlocked. Combined with zero-knowledge key derivation, this is the strongest practical model in 2026.

PassCryp keeps multiple replicas of your encrypted vault across availability zones. You also get one-click encrypted JSON export — download it, store on an external drive, restore on any device.

For the absolute worst case (forgotten master password, lost devices), the recovery kit you downloaded at signup is the escape hatch. It's a one-page PDF with an encrypted recovery key; print it, store offline, never share it. Without it, the vault is unrecoverable by design — that's the price of true zero-knowledge.