Offline-first vault
Everything stays on-device by default — no account, no server, no internet required.
Offline-first — Zero-knowledge sync
We believe %%PK_SECRET_WORD%% are safest when no one knows them — not even us.
PassKub keeps every password and PIN encrypted on your own device first, with an optional Premium cloud sync that even we can't read. One clean vault, on Android, iOS, Windows, macOS, and your browser.
- AES-256-GCM encryption
- Argon2id key derivation
- Works fully offline
- No sign-in required to use
Manage every password, store it securely, and never worry about a forgotten password again.
Desktop
Mobile
Android
iOS
Windows
macOS
Chrome
Edge
Firefox
Safari
Features
Everything a password manager should be — nothing it shouldn't.
Clean, minimal, and secure by default. Every core feature works completely offline, free, forever.
State-of-the-art encryption
Argon2id key derivation and AES-256-GCM authenticated encryption protect every entry.
Password & PIN generator
Cryptographically secure generation, plus zxcvbn-style strength analysis on everything you store.
QR & NFC handoff
Move a credential from one device to another instantly — no cloud account needed.
Expiry reminders
Set your own lifetimes and get notified before a password or PIN goes stale.
Optional cloud sync
Premium adds end-to-end encrypted sync across every device — we only ever store ciphertext.
Secure notes & custom fields
Store free-form notes with the same encryption, add your own labeled fields to any item, and keep a local history of past passwords.
Passkey sign-in
Save and sign in with FIDO2 passkeys stored right in your vault (Android now, more platforms coming).
Vault health & breach check
Instantly flag weak, reused, or aging passwords, plus an optional HaveIBeenPwned breach check.
Walkthrough
Follow the vault as you scroll.
A quick, real tour of PassKub — scroll to step through it. Pick a view to see it at its real proportions.
01
Unlock in a tap
Biometric unlock or your keypass — every vault protected by Argon2id key derivation and AES-256-GCM encryption before it ever touches disk.
02
One vault, every device
The exact same vault on Windows, Android, iOS, macOS, and your browser — searchable and organized by tag.
03
See everything at a glance
Open any saved login to see its username, password, notes, and history in one clean view.
04
Share via QR — no cloud needed
Hand a credential to another device instantly, end-to-end encrypted, without ever creating an account.
05
Generate strong passwords
Cryptographically secure generation with real-time strength feedback, built right in.
06
Get notified the moment it matters
Expiry reminders and Quick Fill requests surface right when you need them.
07
Approve a Quick Fill handoff
Match the shape and number to approve a credential handoff between your devices — instantly, no typing.
08
Settings, your way
Fine-tune biometrics, auto-lock timing, and backups — one consistent settings screen on every device.
09
Optional, zero-knowledge sync
Turn on cloud sync only if you want it — PassKub's servers only ever see ciphertext, never your passwords.
Download
Get PassKub on every device you use.
No sign-in required to download or use the free tier. Latest version See what's new
Mobile
Android & iOS
Get it on Google Play
Get it on the App StoreDesktop
Windows & macOS
Browser extension
Chrome, Edge, Firefox & Safari
Packages
Start free. Upgrade only if you need sync.
Exact prices and subscription lengths are shown in the app, the extension checkout, or the relevant app store before you pay.
marks the feature that sets a package apart from the rest.
| PassKub Features | Most popular |
Best value
FamilyOne shared vault for your household |
Special enterprise | |
|---|---|---|---|---|
| Vault essentials | ||||
| Unlimited passwords & PINs | Included | Included | Included | Included |
| Unlimited card / identity | Included | Included | Included | Included |
| Autocomplete everywhere | Included | Included | Included | Included |
| Argon2id + AES-256-GCM encryption | Included | Included | Included | Included |
| Custom categories, generator & strength meter | Included | Included | Included | Included |
| Expiry reminders | Included | Included | Included | Included |
| Local quick fill everywhere on desktop | Included | Included | Included | Included |
| Device migration via one-time QR / NFC transfer | Included | Included, guided | Included, guided | Included, guided |
| Secure notes, custom fields & password history | Included | Included | Included | Included |
| Passkey (FIDO2) sign-in — Android | Included | Included | Included | Included |
| Encrypted vault export / import | Included | Included | Included | Included |
| Local vault health report — weak, reused & old passwords | Included | Included | Included | Included |
| Sync & cross-device quick fill | ||||
| Cross-device quick fill from mobile | Not included | Included | Included | Included |
| End-to-end encrypted cloud sync | Not included | Included | Included | Included |
| Continuous backup — no local-only single point of failure | Not included | Included | Included | Included |
| Priority support | Not included | Included | Included | Included |
| Online breach check via HaveIBeenPwned | Not included | Included | Included | Included |
| Encrypted file attachments, synced across devices | Not included | Included | Included | Included |
| Send an item via secure, PIN-gated link | Not included | Included | Included | Included |
| Sharing | ||||
| Family sync — one shared household vault | Not included | Not included | Included | Not included |
| Choose 2, 5 or 10 member codes — from $19.99/yr | Not included | Not included | Included | Not included |
| Every member has equal read/write access | Not included | Not included | Included | Not included |
| Team sync with per-member roles | Not included | Not included | Not included | Included |
| Seat pool & managed licensing | Not included | Not included | Not included | Included |
| Business & enterprise | ||||
| Enterprise SSO (OIDC/SAML) | Not included | Not included | Not included | Included |
| Allowed email-domain restrictions | Not included | Not included | Not included | Included |
| Centralized admin console | Not included | Not included | Not included | Included |
| Windows lock-screen sign-in via Credential Provider | Not included | Not included | Not included | Included |
| Local storage for sensitive data — bring your own backend | Not included | Not included | Not included | Included |
| SCIM directory sync (Okta, Azure AD & more) | Not included | Not included | Not included | Included |
| Billing | ||||
| Billing terms | Free forever | Monthly or yearly, cancel anytime | Yearly only, cancel anytime | Custom seat pool — contact sales |