Pearl Pass

Generate, save and fill strong passwords. End-to-end encrypted and synced across your devices with your Google account.

Pearl Pass generates strong passwords, saves them as you sign in or sign up, and fills them back in when you need them — from a small icon in the password field or from the toolbar. GET STARTED Sign in with your Google account, then choose a master password. Your Google account is what ties your vault to you on every device; your master password is what encrypts it. WHAT IT DOES • Generates strong random passwords or memorable passphrases, right in the sign-up form, with a strength meter. • Offers to save a login when you sign in, with an undo if you'd rather not keep it. • Fills a saved login only on the site it was saved for. It fills — it never presses the sign-in button for you. • Showing or copying a saved password asks you to confirm it's you (master password, or your device's fingerprint/face where available); after that, reveals stay open for 20 minutes or until you lock. • Keeps identities (name, address, phone) and payment cards, and fills them into forms. A card is never filled without your click. • Stores time-based one-time codes (TOTP / 2FA) alongside a login. • Vault health: spots weak and reused passwords. The optional "Have I Been Pwned" breach check sends only five characters of a password hash, never the password. • Auto-lock, a never-save list per site, and CSV and encrypted backup import/export. • Delete your account and all synced data from Options at any time. PRIVATE BY DESIGN • Your vault is encrypted on your device (AES-256-GCM, key derived from your master password with Argon2id) before anything is synced. • Your master password never leaves your device. Perlicom cannot read your vault or recover your master password. • Synced between your browsers and the Pearl apps, end-to-end encrypted: the server only stores data it cannot decrypt. • No analytics, no advertising, no tracking. We never sell your data. OPTIONAL: CODES FROM YOUR PHONE If you also use the Pearl Pass Android app with the same Google account and keep "Phone codes" on there, a verification code that arrives on your phone is offered in Pearl Pass as "Use this code" while a code box is on screen. Only the code (plus the app and sender label) is sent, end-to-end encrypted. The browser ignores it after five minutes, the server deletes it within ten, and it is filled only when you click. Without a linked phone this does nothing. Made by Perlicom Systems Ltd, Ireland. Privacy policy: https://browser.perlicom.com/privacy