Octa Pass

Free, open-source password manager. Fill passwords, passkeys and 2FA codes, end-to-end encrypted so only you can read them.

Octa Pass keeps everything sensitive in one end-to-end encrypted vault: passwords, passkeys, one-time codes, cards, identities, secure notes and more. It's free, has no ads or trackers, and its code is open source under the MIT licence. WHAT IT DOES • Fills and saves logins in the page, with an icon in each login field and a fill menu • Signs in with passkeys stored in your vault • Shows two-factor (TOTP) codes and fills them for you • Fills cards, identities and addresses • Generates strong passwords and passphrases • Health check: breached, reused and weak passwords (breach checks use k-anonymity, so your password never leaves your device) • Masked email aliases with your alias provider • Unlocks with the Octa Pass desktop app and Touch ID or Windows Hello, if you use it • English and Arabic, with right-to-left layout HOW YOUR DATA IS PROTECTED Everything is encrypted on your device before it syncs, with a key derived from your master password and a 128-bit Secret Key. Login uses OPAQUE, so your master password never crosses the network. The server only stores ciphertext: we can't read your vault, and neither can anyone who breaks into the server. FREE, AND YOURS Create a free account at https://vault.octap.app, or run your own server: the same apps connect to it. Export everything at any time. STATUS Octa Pass is in public alpha. It hasn't had its independent security audit yet, so keep a backup of anything important. Website: https://octap.app Source code: https://github.com/octap-app/octapass Security design: https://octap.app/docs/security/overview/