Password Manager
A local-only password vault with Touch ID, TOTP codes, and breach monitoring.
A 1Password-style vault that lives entirely on your Mac. One master password unlocks it; everything inside is encrypted; nothing ever phones home.
Create your vault
- Open Password Manager from the sidebar.
- Choose a master password. Make it long — a sentence you'll remember beats
P@ssw0rd!. - Confirm it. Your vault now exists.
Your master password cannot be recovered. Period.
There is no "forgot password" link, because there is no server that knows it. That's the point: nobody but you can open this vault. Write your master password down and keep it somewhere physically safe.
Under the hood: your master password is stretched into an encryption key (PBKDF2, 650,000 rounds), which wraps a random vault key (AES-256-GCM). Wrong password = the math simply fails. There's no "password hint" stored anywhere.
Unlock with Touch ID
After the first unlock you can enable Touch ID fast unlock in the vault settings. From then on, a fingerprint opens the vault; the master password always works as the fallback.
Add items
Click + and pick a category. There are 8 — Login, Password, Secure Note, plus developer-focused ones (API keys, database credentials, and the like). Each category has sensible field templates, and you can always add custom fields.
Copying a username or password puts it on your clipboard — and the app marks its own secret copies as concealed, so they never land in your clipboard history.
Generate strong passwords
The built-in generator makes three kinds:
- Random — letters/digits/symbols, adjustable length
- Memorable — real words joined together (easier to type on another device)
- PIN — digits only
An entropy meter shows how strong the result actually is.
Two-factor codes (TOTP)
Store an item's 2FA secret (the otpauth:// string or Base32 code from the QR-code setup screen) and the app shows the rotating 6-digit code, just like an authenticator app. One place for the password and the code.
Watchtower — your security dashboard
Watchtower scans your vault and reports:
- Reused passwords (same password on multiple items)
- Weak passwords
- Items with http:// URLs (unencrypted sites)
- Expiring items
- Breached passwords — checked against the Have I Been Pwned database using k-anonymity: only the first 5 characters of a scrambled fingerprint of the password ever leave your Mac. See Permissions & Privacy for the caveman explanation.
Organize and find
- Tags and favorites for grouping
- Search across all items
- Trash keeps deleted items for 30 days, then purges them
- Password history: when you change a concealed field, the old value is kept on the item — you can always get a previous password back
Auto-lock and clipboard hygiene
- The vault locks itself after an idle period you choose (typing in the item editor counts as activity, so it won't lock mid-edit).
- Copied secrets auto-clear from the clipboard after a delay — and only if the clipboard still holds what the app put there (it won't wipe something else you copied since).
Import from another password manager
- Export a CSV from 1Password, Chrome, or Bitwarden.
- In vault settings, choose Import CSV and pick the file.
- The columns are recognized automatically; review and confirm.
- Delete the CSV afterwards — it's plaintext.
Export
Export CSV (in settings) asks for Touch ID / your password first, then writes a standard CSV. Same warning: that file is plaintext — treat it like a stack of sticky notes with all your passwords on them.