Offline-first vault
Everything stays on-device by default — no account, no server, no internet required.
Features
Clean, minimal, and secure by default. Every core feature works completely offline, free, forever.
Everything stays on-device by default — no account, no server, no internet required.
Argon2id key derivation and AES-256-GCM authenticated encryption protect every entry.
Cryptographically secure generation, plus zxcvbn-style strength analysis on everything you store.
Move a credential from one device to another instantly — no cloud account needed.
Set your own lifetimes and get notified before a password or PIN goes stale.
Premium adds end-to-end encrypted sync across every device — we only ever store ciphertext.
Store free-form notes with the same encryption, add your own labeled fields to any item, and keep a local history of past passwords.
Save and sign in with FIDO2 passkeys stored right in your vault (Android now, more platforms coming).
Instantly flag weak, reused, or aging passwords, plus an optional HaveIBeenPwned breach check.
Walkthrough
A quick, real tour of PassKub — scroll to step through it. Pick a view to see it at its real proportions.
Biometric unlock or your keypass — every vault protected by Argon2id key derivation and AES-256-GCM encryption before it ever touches disk.
The exact same vault on Windows, Android, iOS, macOS, and your browser — searchable and organized by tag.
Open any saved login to see its username, password, notes, and history in one clean view.
Hand a credential to another device instantly, end-to-end encrypted, without ever creating an account.
Cryptographically secure generation with real-time strength feedback, built right in.
Expiry reminders and Quick Fill requests surface right when you need them.
Match the shape and number to approve a credential handoff between your devices — instantly, no typing.
Fine-tune biometrics, auto-lock timing, and backups — one consistent settings screen on every device.
Turn on cloud sync only if you want it — PassKub's servers only ever see ciphertext, never your passwords.