Octa PassالعربيةGitHubGet updates

The password manager only you can open.

Passwords, passkeys and one-time codes on every device you own. Synced for you, encrypted so only you can read them. Free for everyone, with no ads.

Create a free accountHow it keeps you safe

Public alpha: sign-ups are open in the web vault. The apps are coming to the stores. Follow along

We store it.
We can’t read it.

Your vault is encrypted on your device before it syncs. Here’s the same login twice: once as you see it, once as our server keeps it.

Website
github.com
Username
[email protected]
Password
Lantern-ruby-T7#qv-42
One-time code
––– –––
Passkey
github.com, saved 12 Oct 2026
The same login, as you see it and as our server stores it.

Everything you sign in with.
In one vault.

Passkeys

Create and use passkeys in your browser, and on your phone as its passkey provider. They sync, encrypted, to every device.

One-time codes

––– –––

Filled right after your password.

Autofill that checks the address

Only on the exact site a login belongs to, and only when you ask.

Breach checks that never see your password

Your device sends only the first 5 characters of a hash, and compares the matches itself. How it works

Masked email

[email protected]

A different forwarding address for every site, through the alias service you choose.

Recovery info

See which email and phone can reset each account, and how many backup codes you have left. If one email is compromised, you know exactly what’s at risk.

Cards and identities

Checkout and sign-up forms, filled. Nothing is processed, only stored encrypted.

Bring everything with you

1Password Bitwarden LastPass Chrome Safari Firefox Proton Pass Dashlane KeePass Authenticator apps

And leave whenever you want, passkeys included.

Free. For everyone.
Not a trial.

Octa Pass

$0 forever

  • Unlimited passwords, passkeys and one-time codes
  • Unlimited devices, synced in real time
  • Autofill in browsers, on iPhone, Android, Mac, Windows and Linux
  • Breach, reuse and weak-password checks
  • Family sharing for up to 6 people
  • Emergency access and recovery tools
  • 1 GB for files and documents
  • Export everything, any time

Nothing to set up. Create an account in the web vault today, and the apps sync with it as they reach the stores.

How can it be free?

Your vault is tiny. A whole vault of 500 logins is about a megabyte of encrypted data, so hosting it costs very little.

No ads, and nothing to sell. We can’t read your vault, so there’s no data to profit from even if we wanted to.

Funded in the open. Donations, sponsors and grants will pay for the servers, with the costs published every month.

Sealed before it leaves your hands.

  1. 1

    Two secrets unlock it

    Your master password, plus a 128-bit Secret Key that lives only on your devices and in your printed Recovery Kit.

  2. 2

    Your device makes the key

    Argon2id turns them into your Account Unlock Key. That key never leaves the device.

  3. 3

    Every item gets its own lock

    Each item is encrypted with XChaCha20-Poly1305 under its own random key, sealed by your vault key.

  4. 4

    Only ciphertext travels

    Sign-in uses OPAQUE, so your password never crosses the network. Our server only ever holds sealed items.

Our server can see

  • Your account email
  • How many items you have, and their sizes
  • When items change
  • Which accounts share a vault

Our server never sees

  • Titles, websites or usernames
  • Passwords, passkeys or one-time codes
  • Notes, cards, identities or files
  • Your master password or Secret Key

Everything the server stores, in full

On every device you own.

Where the operating system lets a password manager fill passwords, Octa Pass uses it. Where it doesn’t, the browser extension and an auto-type shortcut fill the gap. The web vault is open now; the apps are built and coming to the stores.

  • Web vault

    Your vault in any browser, with nothing to install.

    Open web vaultSource

  • Chrome, Edge, Brave

    Fills and saves logins in the page. Passkeys too.

    Coming soonSource

  • Firefox

    The same extension on desktop and Android.

    Coming soonSource

  • Safari

    The same extension in Safari on Mac, iPhone and iPad.

    Coming soonSource

  • Mac

    System AutoFill in Safari and every app. Touch ID.

    Coming soonSource

  • Windows

    Extension plus auto-type. Windows Hello.

    Coming soonSource

  • Linux

    Extension plus auto-type, on X11 and Wayland.

    Coming soonSource

  • iPhone and iPad

    A native app with system AutoFill and passkeys. Face ID.

    Coming soonSource

  • Android

    A native app with autofill, keyboard suggestions and Credential Manager.

    Coming soonSource

  • Terminal

    A CLI for developers: read items, get codes, run commands with secrets.

    Coming soonSource

  • VS Code

    Insert secret references, and run commands with the secrets filled in.

    Coming soonSource

  • JetBrains IDEs

    The same tools in IntelliJ IDEA and the other JetBrains IDEs.

    Coming soonSource

Platform details and limits

Open source,
so you don’t have to trust us.

Anyone can check the code. The service you use runs the same MIT code that’s published, and it gets an independent security audit before 1.0.

Your own server, if you want one. Companies and tinkerers can run Octa Pass themselves. The same apps connect to it: pick “Self-hosted” at sign-in and enter its address.

No ads. No trackers. Not on this website, not in the apps.

Self-host
$ docker build -f apps/server/Dockerfile -t octapass-server .
$ docker run -d -p 8080:8080 \
    -v octapass-data:/data \
    -e OCTAPASS_PUBLIC_URL=https://vault.example.com \
    octapass-server
How the apps connect to your own server

Built in the open, one phase at a time.

  1. Mostly doneFoundations
  2. BuiltCore and server
  3. BuiltBrowser extensions
  4. BuiltDesktop apps
  5. BuiltMobile apps
  6. BuiltSharing
  7. In progressTeams and more
  8. In progressDeveloper tools and file safe

The full roadmap

Questions.

Is Octa Pass really free?

Yes. Unlimited passwords, passkeys and devices, family sharing for up to 6 people and 1 GB for files, with no trial period and no ads. It’s funded by donations, sponsors and grants.

Can you see my passwords?

No. Your vault is encrypted on your device before it syncs, and the keys never reach our server. A stolen copy of our database would also need your Secret Key, which we never receive.

What if I forget my master password?

You recover with the recovery code in your Recovery Kit, or through an emergency contact you set up. We can’t reset it for you. That’s the price of a server that can’t read your data.

Why no ads?

Ad code next to your passwords would be a security hole, and a password manager has to be trusted completely. Octa Pass is funded by donations, sponsors and grants.

Can I use it today?

Yes, as a public alpha: create a free account in the web vault. The apps are built and coming to the stores. The independent security audit comes before 1.0, so don’t rely on Octa Pass alone for anything important yet.

Can I run my own server?

Yes, it’s optional. The server is open source, and the same Octa Pass apps connect to it: choose “Self-hosted” when you sign in and enter your server’s address. Autofill, passkeys and Face ID work the same way.

Can I bring my passwords from another app?

Yes. Octa Pass imports from Chrome, Edge, Firefox, Safari, Bitwarden, 1Password, LastPass, Proton Pass, Dashlane, Keeper, KeePass, authenticator apps and the FIDO Credential Exchange Format.