Coauth: Team Password & Passkey Manager

Zero-knowledge password + passkey manager for teams. Save, autofill, and share logins, end-to-end encrypted.

Coauth is a team password manager that shares passkeys as well as passwords, end to end encrypted, and it is zero-knowledge: our servers only ever hold ciphertext. It saves your website logins, fills them in for you, generates strong passwords, and does the one thing nothing else does well: it lets you SHARE a login, a password or a passkey, with a team, fully encrypted, so a shared account works for everyone without passing secrets around in chat. No account needed to start. Install and use it locally. Create a free account (Google sign-in, or a one-time code by email) only when you want to sync across your devices or share with a team. WHAT IT DOES • Save passwords as you log in and autofill them on your next visit, with a built-in strong-password generator. • Create and use passkeys on any site that supports them. Coauth is a software authenticator, so its passkeys can be shared (unlike a fingerprint passkey locked to one device). • Share any login into a team. Teammates autofill the password or use the shared passkey from their own browser, and no secret ever changes hands. • Or share with one person by email address, with no team to set up first. They get a link, Coauth does the rest, and the login is usable the moment they join. • Keep secure notes in the same encrypted vault. • Run a security health scan that flags weak, reused, and old passwords right on your device. • Store two-factor authenticator codes (TOTP) next to the login they belong to (Pro). • Manage everything in a full dashboard or a quick popup: one vault for passwords, passkeys, and notes, plus teams, roles, invites, and an activity log. WHY IT IS DIFFERENT • Purpose-built for SHARED logins, with roles, email invites, and real revocation: removing a member marks the team for re-keying, and the next owner or admin session rotates the team key and re-encrypts the shared items, so the removed member cannot read anything from then on. • Zero-knowledge. You unlock your vault with your device passkey (or a recovery key only you hold). Everything is end to end encrypted with audited cryptography (libsodium) before it syncs, so the server stores only ciphertext and can never read your passwords or passkeys. A backend breach exposes nothing usable. • Nothing to pass around. No exported password in a chat, no shared spreadsheet of logins. HOW IT WORKS 1. Install and secure your vault with this device's unlock (Windows Hello or Touch ID) or a one-time recovery key. No account needed to start. 2. Log in on a site and Coauth offers to save it. Or add one manually with the generator. 3. Next visit, click the Coauth suggestion to autofill. 4. Sign in with Google when you want to sync across your devices or share a login with a team. PLANS • Free: your full personal vault (passwords, passkeys, notes), autofill and the generator, the on-device health scan, and one team with up to 3 members. Shared passkeys are unlimited. • Pro, $5 a month or $49 a year: unlimited teams and members, admin roles, the built-in authenticator for 2FA codes, and a breach check that compares your saved passwords against known data breaches. One flat price whatever the size of your team. GOOD TO KNOW • No account needed to start. A free account unlocks unlimited saving, sync across your devices, and team sharing. • Coauth can only share passkeys it created. A passkey already registered with your fingerprint or a security key cannot be exported (that is how passkeys work). Add a new one through Coauth to share it. • One passkey extension can be active at a time. Coauth has a one-click Pause to hand control back when you need it.