Zero-knowledge password manager for logins, cards, and notes. Everything is encrypted on your device with AES-256-GCM. The server only stores the encrypted vault.
Built for people who care about privacy. No bloat, no tracking, no compromise.
Logins, cards, and notes are encrypted on your device with AES-256-GCM. The server only stores the encrypted vault and cannot read it.
The vault lives on your device and unlocks offline. Changes sync when you are back online. Free accounts sync on up to 2 devices.
Store logins, credit cards, and secure notes side by side, not just passwords, all in one encrypted place.
Generate strong passwords or passphrases, with length, symbols, and casing you choose. Included on the free plan.
Standard accounts include an emergency Recovery Key PDF. Advanced security adds a Secret Key, and the vault cannot be recovered if you lose it.
Unlock with biometrics, set an inactivity auto-lock, and copied secrets leave the clipboard after 30 seconds.
Premium removes the two-device limit. The vault stays end-to-end encrypted, the server still cannot read it.
A score for the whole vault, plus weak, reused, and breached passwords. Breach checks use Have I Been Pwned with k-anonymity, so the full password is never sent.
Save authenticator secrets on your logins and read the codes in NullPass, including from a QR scan.
Organize entries into folders and tag them with contexts to structure your vault your way.
See previous passwords for a login after you rotate them.
The client is open source, and the encryption code is auditable on GitHub. The sync server is proprietary.
These plans describe the app we are building. NullPass is not available to download yet.
.exe installer
In progressMac App Store
In progress.AppImage
In progressGoogle Play
In progressApp Store
In progressPublic download is not available yet.
This page shows what the app will do. You cannot download it or start a subscription yet.