Primitive Pass

Zero-knowledge password manager browser companion for Primitive Pass.

YOUR PASSWORDS. YOUR AI. YOUR RULES. Primitive Pass is an Australian-owned password manager that combines everyday password protection with something increasingly important: control over what AI assistants can access and do. We make software. We don't make money by turning you into a product. Free forever. No advertising. No selling your data. No AI training on your personal information. 100% Australian-owned and developed in Perth, Western Australia. FIRST, A PASSWORD MANAGER THAT DOES ITS JOB Primitive Pass makes everyday password management easier. • Save logins and fill them on websites you choose. • Create and use passkeys on supported websites. • Generate strong, unique passwords through your connected vault. • Keep verification codes, private notes and API credentials in your encrypted web vault. • Search for accounts instead of remembering every password. • Synchronise your encrypted vault across supported devices. • Choose which websites the extension can access and revoke that access when you want. Your vault is encrypted on your device before syncing. Our servers store encrypted records, not readable passwords. NOW, SOMETHING DIFFERENT: AI ACCESS GOVERNANCE AI assistants are becoming capable of signing in to services, completing tasks and working across your digital life. But being able to use a password should never mean having unrestricted access to everything behind it. Primitive Pass introduces a governed approach to AI credentials. Each agent has its own identity. Each permission has a purpose. Every action must stay within its authority. Through supported, separately configured integrations, Primitive Pass provides: AGENT PASSPORTS Give different AI agents different permissions. For each supported credential, a passport can specify: • Allowed: the agent can use the credential within its authorised limits. • Ask: the agent must get approval before each use. • Never: the agent cannot use that credential, even when a broader permission exists. An agent cannot simply rewrite its own passport to give itself more access. USE WITHOUT REVEAL Primitive Pass separates permission to use a credential from permission to reveal it. In supported workflows, the Credential Diode allows an approved login to be used without returning its password to the AI model. This is a meaningful distinction: helping you sign in is not the same as being entitled to know your password. LIMITED AUTHORITY Credential access can be restricted to particular agents, resources, purposes, time periods and numbers of uses. Permissions are checked again when a credential is used. Access can be revoked, and the system records redacted activity without putting passwords into the audit trail. YOU'RE IN CONTROL AI should work within permissions set by people. Primitive Pass is extending its governance system to support additional sensitive actions, with explicit approval rather than unrestricted delegation. Advanced agent integrations require separate configuration. Some integrations and operations remain in security review and are not generally enabled. FOR DEVELOPERS AND PEOPLE BUILDING WITH AI API keys, service credentials and tokens deserve better protection than being scattered across documents, scripts and chat histories. Primitive Pass provides encrypted storage for developer credentials and an emerging governed-access system for supported AI tools. Its architecture includes MCP integrations, separate agent identities, bounded credential-use grants and auditable actions. Supported local companion workflows can connect developer assistants such as Claude Code, Claude Desktop and Codex. Additional hosted integrations are being developed and security-reviewed. The goal is not to make every secret available to AI. The goal is to let AI do approved work without giving away unnecessary authority. AN EXTRA CHECK FOR WEBSITES YOU TRUST Rebirth Lock is an optional domain-continuity protection feature. For websites you choose to monitor, Primitive Pass checks selected public domain-registration information. If that evidence changes or cannot be confirmed, Pass can pause credential use so you can review the situation. A change is not proof of an attack, and Rebirth Lock does not certify that a website is safe. REAL SECURITY ENGINEERING Primitive Pass is designed around established standards and explicit security boundaries. • AES-256-GCM authenticated encryption. • Argon2id password protection. • OPAQUE password-authenticated account sign-in. • WebAuthn passkey support. • Encryption on the client before synchronisation. • Exact-origin credential matching. • Site-by-site browser permissions. • Limited, revocable AI credential-use grants. • Separate USE and REVEAL authority. • Redacted agent activity records. • Security controls that refuse unauthorised access rather than silently widening permissions. These protections are part of an evolving security architecture, with independent production assessment remaining an important release requirement. WHAT'S NEXT FOR PRIMITIVE PASS? We're developing a wider system of identity, recovery and access protection. Guardian Recovery An experimental recovery system designed to let trusted guardians help restore access without giving any one person or the ordinary Pass server unilateral recovery power. Stronger Zero-Trust Controls Extending identity verification, device checks, approvals and limited-use authority across sensitive operations. Key Transparency Research into verifiable encryption-key records that can help detect unexpected changes or substitutions. Identity Exposure Monitoring Exploring optional breach monitoring to help people understand when their personal information appears in known data breaches. These are active research and development directions, not features promised in the current release. FREE FOREVER. PRIVATE BY DESIGN. Our commitments are not temporary marketing offers. Essential password management will always have a free plan. We will not sell your personal data. We will not use your personal information or vault contents to train AI models. We will not show advertising in Primitive Pass. And we will not require you to use AI to benefit from our password manager. Advanced features and higher limits may have optional paid plans. The fundamental promise stays the same. 100% AUSTRALIAN-OWNED AND DEVELOPED Primitive Pass is built by Primitive AI Labs Pty Limited, an independent Australian technology company based in Perth, Western Australia. We believe people deserve technology that protects their information and respects their decisions, even as increasingly capable AI systems become part of everyday life. Your passwords. Your AI. Your rules. Privacy policy: https://pass.primitiveai.com.au/privacy.html