hassle-free password manager

Passwords you control.
Clarity you feel.

A local-first vault that works like a spreadsheet — fast edits, categories, one-tap copy — while your secrets stay encrypted on-device. Optional sync stores only ciphertext in your database; your master password is never sent to our servers.

Getting started Sign In

Built for flow

No vault-inside-vault navigation. One grid: site, URL, username, password, notes — edit inline, expand rows for URL & memo, filter and sort. Categories keep teams and life buckets tidy.

Spreadsheet brain, vault muscle

Type directly in the grid. Reveal or mask passwords per row or globally. Copy username or password in one click; copied passwords auto-clear from the clipboard after 20 seconds.

Categories & search

Drag to reorder folders in settings. Search spans site, URL, username, notes, memo, and category — find the right row without hunting through menus.

Strong passwords, fast

Built-in generator with length and character-class controls, CSPRNG-backed generation, and bias-mitigated modulo — then drop the result straight into the row.

Security that earns the name “vault”

Cryptography runs in your browser via the Web Crypto API. Data at rest in IndexedDB is encrypted; the key material derived from your master password exists in memory only while unlocked.

Key derivation & encryption

PBKDF2-SHA256 with a per-vault salt and 600,000 iterations stretches your master password into a 256-bit key. Entry passwords and the TOTP secret are sealed with AES-GCM-256 and a random 12-byte IV per encryption — modern AEAD, not home-grown crypto. 

master password + salt
        │
  PBKDF2-SHA256 (600k)
        ▼
 AES-GCM key (memory only)
   ├── verifier (proves master password)
   ├── TOTP secret
   └── each entry password (own IV)

What never gets stored

Master password Neither plaintext nor a reusable hash is written to disk or sent to a server.
Derived AES key Lives in memory for your session; discarded on lock or when you close the tab.
Server-side knowledge Google or email sign-in only proves identity. Optional sync uploads the same ciphertext JSON you could export — never your master password or keys.

Optional sync — encrypted blobs, not trust

When signed in, your vault can sync automatically as encrypted data in your database (e.g. Supabase with row-level security). The server stores what your browser already had: ciphertext. On every device you unlock with your passkey — Touch ID, Face ID, or device PIN — or with your master password and a backup code.

Conflict handling

Reconciliation uses vault metadata timestamps so the newest snapshot wins when merging local and remote — predictable behavior for a personal vault.

Portable backups

Export a JSON backup anytime from settings or the lock screen. Import replaces or restores a device — ideal for migration or cold storage alongside sync.

Auto-lock

Idle timeout (1–30 minutes or off) locks the vault automatically. Activity resets the timer so brief walks away don’t leave rows exposed.

Getting started

First launch walks you through a vault you actually own — no vendor password to forget on top of your own.

  1. Sign in with Google or email Identity for sync only — it doesn’t unlock your vault.
  2. Create a strong master password 10+ characters; strength meter nudges you toward better entropy.
  3. Register a passkey Unlock with Touch ID, Face ID, or device PIN. Add a backup authenticator (TOTP) and save your recovery codes for new devices.
  4. Add rows like a sheet Sites, passwords, categories — save and sync when you’re ready.

A password manager built for clarity, not clutter

My Password Vault is a local-first password manager for web, iPhone, and Android. Store site logins in an AES-GCM-256 encrypted vault with PBKDF2 key stretching, unlock with your master password plus passkey or TOTP two-factor authentication, and edit everything in a spreadsheet-style grid with categories, search, and one-click copy. Cloud sync is optional and uploads ciphertext only—we never receive your master password or decrypted secrets. Start free, then upgrade to PRO with a one-time license for unlimited entries and encrypted backup export.

Ready when you are

Same tool for weekend admins and daily operators: fewer clicks, fewer tabs, more confidence that your credentials never left encryption you control.

Getting started Sign In