GBpass Password Manager

Zero-knowledge password manager: autofill, passkeys, and an end-to-end encrypted vault that only you can unlock.

GBpass is the browser companion to the GBpass password manager. Your vault is end-to-end encrypted: every item is sealed on your device with keys derived from your master password and Secret Key — the server, and we, only ever see ciphertext. Features - Autofill — fills usernames and passwords on the site they belong to, only when you click. Matching is by registrable domain; lookalike domains never match. Save/update prompts after you submit a login form. - Passkeys — GBpass acts as a passkey provider: create and sign in with synced passkeys on any site that supports WebAuthn. - Full vault access — browse, search, create, edit, share and organize logins, cards, identities, notes, documents and files in a desktop three-pane app, or the quick toolbar popup. - Offline — your encrypted vault is cached locally; reads and queued writes work without a connection and sync when it returns. - Password generator — the same generator as the GBpass mobile apps, with a live strength meter. - Biometric unlock (Chrome/Edge/Chromium) — unlock with Touch ID / Windows Hello via WebAuthn; your keys are wrapped so the disk never holds them in the clear. - Zero-knowledge security — Argon2id key derivation, SRP-6a login (your master password never leaves the device), AES-256-GCM item encryption, X25519 end-to-end encrypted sharing. GBpass requires a GBpass account. Accounts are created in the GBpass app for Android — install the app, set up your account and Secret Key there, then sign in to the extension. Sign-up inside the extension or on the web is not available yet. An active plan is required for some features (per your account's plan).