Zero-knowledge · No account needed
A quiet place for the things only you should open.
CabinetPass keeps passwords, two-factor codes, cards and private documents in one encrypted vault that only you can open. No account. No servers of ours.
Free forever · 2 GB encrypted storage* · Syncs through your own Google Drive
A seriously generous free plan. Free forever. No trial, no account.
- Unlimited passwords, cards and notes
- 2 GB of encrypted files*
- 2FA codes, AutoFill and widgets
- Sync across iPhone, iPad, Mac and Android
Many password managers charge for file attachments or 2FA codes. Compare plans
- Your whole vaultPasswords, cards, files, notes
- Live 2FA codeRight on the login
- Pin your top codesLong-press, Pin to Top
- Passport, sealedScan and PDF, each with its own key
- Midnight & LinenThemes with Pro Plus
- Expiry remindersBefore your passport lapses
- Your orderDrag to reorder groups
- Pro PlusEverything unlocked
iPhone recording and Mac screenshot, demo data.
Where your vault lives
There are only ever two places, and you choose whether the second exists.
On your devices
Sealed with AES-256-GCM, opened only by your master password, Face ID or fingerprint.
In your Google Drive, if you like
A sealed copy in a hidden app folder, so your other devices stay in step. Google can store it, not read it.
With us: nowhere
We don’t run servers that hold your data. No account, no analytics, nothing to see, sell or lose.
For the technically curious
- Key derivation
- Argon2id, 64 MiB of memory, 3 passes
- Encryption
- AES-256-GCM, authenticated, so any tampering is detected
- Vault key
- Random 256-bit, wrapped by your master key
- Files
- A separate key for every document
- Breach check
- Opt-in; sends a 5-character hash prefix only
- Format
- Documented, with an independent open-source decryptor
Switching is easy
Bring your passwords from the app you use today.
On iPhone, Apple Passwords hands everything over directly (iOS 26). From the others, export a CSV and CabinetPass walks you through the rest.
- Apple Passwords
- Google Password Manager
- Chrome
- Safari
- Firefox
- 1Password
- Bitwarden
- LastPass
- Dashlane
- Proton Pass
- Keeper
- KeePassXC
- Microsoft Edge
Product names and logos are trademarks of their respective owners and are shown only to indicate import compatibility. CabinetPass is not affiliated with them.
Everything in one vault
Built for the things you can’t afford to lose.
Groups that make sense
Web Logins, Social Media, Banking & Finance, SSH & Servers, Wi-Fi, Identity, Documents and more — or create your own with custom icons and colours.
Encrypted documents
Attach PDFs, photos and scans to any item, or share them straight from another app with Share › CabinetPass. Each file gets its own key, and they open in-app without leaving an unencrypted copy behind.
Built-in authenticator
Scan a QR code to add two-factor accounts. Live codes with a countdown, and codes saved on a login show up automatically.
Password generator
Random passwords, easy-to-type passphrases or PINs, with strength and entropy at a glance.
Security check
Spot weak, reused and old passwords. Optionally check for breaches — only a short hash fragment is ever sent.
Unlock in a glance
Face ID or a 6-digit passcode, auto-lock, clipboard auto-clear and a privacy blur in the app switcher.
SSH keys
Import OpenSSH, PEM or PuTTY key files. See key type and fingerprint, get the public key filled in, copy a ready-made ssh command or export the key file.
iPhone, iPad, Mac and Android
Crafted for each device: Password AutoFill and widgets on iPhone and iPad, a full iPadOS sidebar layout with Split View, Stage Manager and full-screen items, the menu bar and keyboard shortcuts on Mac, and a native Android app with fingerprint unlock. One purchase covers all your Apple devices.
Made for what you keep
Every item gets its own shape.
A card should look like a card. A server should connect. A note should read like a note. Try them below, with demo data.
A wallet, not a list.
Cards stack like the real thing. Tap one and it opens to the full card: number hidden until you ask, each detail copies with a tap, and the back keeps the security code.
- Network detected from the number
- Scan a card with the camera
- Reminder before it expires
Tap a card to open it
Servers you can connect to.
Save a host once with its key. Tap Connect and a terminal opens, signed in with the key straight from the vault: read in memory for the session, never written to disk.
- Host fingerprint pinned; a changed key is blocked
- OpenSSH, PEM and PuTTY keys
- Terminal in your theme, with a shortcut bar
SSH terminal: Pro Plus early access.
Tap Connect to open a session.
Notes that read like notes.
Secure Notes understand Markdown: headings, lists, checklists, links and code. Write in plain text, read it formatted, and tick checklist items right in the note.
- Encrypted like everything else
- Search finds titles and notes, never secrets
- Free on every plan
Before the move
New Wi-Fi
Router admin is at 192.168.1.1, the password lives in the Home Wi-Fi item.
# Before the move - [x] Forward post to the new address - [ ] Book the van for **Saturday 9:00** - [ ] Take meter readings # New Wi-Fi Router admin is at `192.168.1.1`, the password lives in the *Home Wi-Fi* item.
Logins with their codes attached.
The two-factor code lives on the login it belongs to. Copy anything with a tap; the clipboard clears itself. Every password change is kept in the item’s history.
- AutoFill in apps and Safari
- Large Type for reading a password aloud
- Weak and reused passwords flagged
Guests join without asking.
A Wi-Fi item shows a QR code. Guests point their camera at it and they’re on, without you reading out a password. Share the item as text with the password off by default.
- Network name, security type and password together
- Works with the iPhone and Android cameras
Example network. Scan it and your phone offers to join “Home Wi-Fi”.
Everything included
The full feature list.
60 features across security, files, 2FA, SSH, sync and sharing, all in the free plan. Pro removes the 2 GB file limit; Pro Plus adds the extras at the end.
Show all featuresHide features
Unlock & security
- Argon2id (modern, memory-hard) + AES-256-GCM on device
- Face ID, Touch ID or fingerprint unlock
- 6-digit app passcode, locks after 5 wrong tries
- Auto-lock: immediately, 1, 5 or 15 min, 1 hour
- Master password reminder every 15th quick unlock
- Change master password without re-encrypting
- Erase vault from the device
- Alert about failed unlock attempts
- Show password, Caps Lock warning, honest recovery help
Privacy
- Hide in App Switcher (privacy blur)
- Clipboard auto-clear: 30 s, 1 or 2 min
- Screenshots blocked on Android
- No account, no analytics, no ads, no tracking
- Opt-in breach check (hash prefix only)
Vault & items
- Templates: Login, Card, Bank, Note, Identity, Wi-Fi, Document, SSH Key, Custom
- 11 field types plus SSH keys on any item
- 11 ready-made groups, or your own (38 icons, 13 colours)
- Favorites, Recent, Files and Security lists
- Search across titles, notes and fields (never secrets)
- Password history for every login
- Large Type for reading passwords aloud
- Long-press (or right-click) to copy username, password or code
- Share any item as text: pick the fields, secrets off by default
- Wi-Fi QR code: guests scan to join your network
- Formatted Secure Notes (Markdown): headings, checklists, code
- Recently Deleted: restore for 30 days
Encrypted files
- PDFs, photos and scans, up to 50 MB each
- A separate key for every file
- Built-in PDF and image viewer
- Scan with the camera straight into an item
- Share files from any app: Share › CabinetPass (iPhone, Mac, Android)
- Optimize Photos: resize and strip location data
- 2 GB free, unlimited with Pro
2FA & generator
- Built-in authenticator (TOTP, RFC 6238)
- SHA-1/256/512, 6 or 8 digits, QR scanning
- Codes shown on the login they belong to
- Codes sync across your devices, encrypted
- Pin favourite codes to the top
- Generator: random, memorable passphrase or PIN
- Strength meter and entropy for every password
- Weak, reused and old password report
SSH keys
- Import OpenSSH, PEM and PuTTY keys
- Type, size and SHA-256 fingerprint
- Public key filled in automatically
- One-tap ssh command
- Export key files with the right format
Sync, backup & import
- Optional sync through your own Google Drive
- Item-by-item merge across iPhone, iPad, Mac and Android
- Wi-Fi only sync and file sync options
- Encrypted backup file export and restore
- Import from Apple Passwords, Google, 1Password, Bitwarden & more
- Read-only Vault Viewer for Windows, Linux, any browser
On your devices
- Password AutoFill in apps and Safari (iPhone)
- Widgets & Control Center: Scan, New Item, 2FA
- iPad: sidebar layout, Split View, Stage Manager, every orientation
- Android: fingerprint unlock, share sheet, Google Play
- Mac: sidebar, menu bar, ⌘ shortcuts, Touch ID
- Full screen item view and editor on iPad and Mac
- Light, Dark or System theme (plus Midnight & Linen with Pro Plus)
- Liquid-glass tab bar, native iOS design
Pro Plus extras
- HD per photo: one tap for full resolution, location still removed
- Weekly breach alerts (automatic check, notified about new leaks)
- Expiry reminders for passports, cards and documents
- Midnight & Linen themes, terminal included
- Alternate app icons (iPhone, Android)
- Organize Groups in your own order
- SSH server categories: Production, Staging…
- SSH terminal: early access by invitation
Two-factor, built in
Your codes live next to your passwords.
Standard TOTP (RFC 6238) with SHA-1, SHA-256 and SHA-512, 6 or 8 digits. Tap a code to copy it — it’s cleared from the clipboard automatically.
Early access · Pro Plus
SSH, straight from your vault.
Save a server once, then open it in SSH & Servers and tap Connect. A terminal opens and signs in with the item’s key or password.
- Keys never leave the vault. Your key is read in memory for the session only and never written to disk.
- Host verification. Each server’s fingerprint is saved with the item; if it ever changes, the connection is blocked.
- Matches your theme. Light, Dark, and the Pro Plus Midnight and Linen themes, with colours tuned for each.
- Shortcut bar for Esc, Tab, Ctrl, Alt, arrows and
| ~ / -. Pinch to zoom; landscape on iPhone.
iPhone, iPad and Mac. Early access for Pro Plus by invitation. Demo server and data.
Ready for iPhone Duo
Fold it, open it, carry on.
On iPhone Duo, CabinetPass follows the screen you’re using. Open the phone and your vault spreads out into a sidebar layout. Close it and you’re still on the same item.
- Three panes inside. Groups, the list and the open item side by side, in either orientation.
- Controls beside the camera. Copy, Edit, the tabs and Lock sit in a column under the status bar, so the content keeps the whole screen.
- Nothing lost when you fold. The item you were looking at stays open as the layout changes.
- One hand on the outside. The outer screen keeps the phone layout, with everything in reach.
Captured in the iPhone Duo simulator with demo data.
How it’s encrypted
Only your master password opens the vault.
Encryption happens on your iPhone or Mac. Nothing readable is ever stored or uploaded.
- 1Master password
Known only to you. Never stored or sent.
- 2Argon2id
The modern, memory-hard standard (64 MiB, 3 passes). Each password guess costs far more than with older methods like PBKDF2.
- 3Vault key
A random 256-bit key, wrapped by your master key.
- 4AES-256-GCM
Seals your vault and each file with its own key.
- 5Encrypted vault
Stored on your device and, if you choose, your Google Drive.
Tamper-proof. Authenticated encryption detects any change to your data.
Fast password changes. Only the vault key is re-wrapped; Face ID keeps working.
Passcode lockout. After 5 wrong attempts, only the master password works.
Sync on your terms
Every device. Your Google Drive.
Sync is optional. When it’s on, an encrypted copy lives in a private app folder in your own Drive — hidden from the Drive app, readable only with your master password.
1Turn on sync
Settings → Google Drive → sign in. Your encrypted vault uploads.
2Add another device
Install CabinetPass → Import Existing Vault → From Google Drive → enter your master password.
3Stay in sync
Changes merge item by item across devices. Status and any issues show right on the Vaults screen.
Prefer offline? Export an encrypted backup file anytime and restore it on a new iPhone.
Data Not Collected.
No analytics, no ads, no tracking, no account. We don’t run servers that hold your data, so there’s nothing for us to see, sell or lose.
- Your vault stays on your device unless you turn on sync.
- Sync stores only encrypted data, in your own Google Drive.
- Breach checks send a 5-character hash prefix — never your password.
Compare
Simpler from the first minute.
No account to create, no sync service to trust, and an app that looks and feels like it belongs on your iPhone, iPad, Mac and Android phone. Here is how CabinetPass stacks up, including where others are ahead.
Open the app, set a password, done
No sign-up, email or Secret Key. Sync is a single Google sign-in, and only ciphertext leaves your device.
Feels like the system apps
Tab bar and sheets on iPhone, a sidebar layout on iPad, menu bar and ⌘ shortcuts on Mac. Copy a password with one tap and read it back in Large Type.
Everything in one vault
Passwords, 2FA codes, cards, IDs, Wi-Fi, SSH keys and encrypted documents, without paying extra for files or codes.
| Feature | CabinetPass | 1Password | Bitwarden | Apple Passwords | KeePassXC |
|---|---|---|---|---|---|
| Getting started & everyday use | |||||
| Start without an account | Master password only | Account + Secret Key | Account + email | Apple ID | Local file |
| Designed for iPhone, iPad and Mac | Crafted for iOS, iPadOS and macOS, plus a native Android app | Cross-platform app | Cross-platform app | Desktop only; iOS via 3rd-party apps | |
| Item templates for cards, IDs, Wi-Fi, SSH… | 9 types + custom fields | 5 types + custom fields | Passwords & Wi-Fi | Generic entries | |
| Share an item as text, secrets off by default | Pick fields + Wi-Fi QR | Share links | Bitwarden Send | Groups / AirDrop | |
| Formatted notes (Markdown) | Free, text only | Plain text | Plain text | Plain text | |
| Home & Lock Screen widgets | |||||
| Files, 2FA & developer tools | |||||
| Encrypted file attachments | 2 GB free | Paid plans | Paid plans | ||
| In-app PDF & image viewer | Decrypted in memory | Download first | |||
| Built-in 2FA codes | Free | Paid plans | |||
| 2FA codes sync across devices | Free, end-to-end encrypted | Paid plans | iCloud | Via your synced file | |
| SSH keys | Import, fingerprint, export | + SSH agent | + SSH agent | Via KeeAgent | |
| Built-in SSH terminal | Pro Plus early access | ||||
| Breach check | Opt-in, k-anonymity | Paid reports | |||
| Privacy & price | |||||
| Where your vault is stored | Device + your Google Drive | 1Password cloud | Bitwarden cloud or self-hosted | iCloud Keychain | A file you sync yourself |
| Key derivation | Argon2id (64 MiB), modern and memory-hard | PBKDF2 + Secret Key | PBKDF2 (Argon2id optional) | Apple Keychain | Argon2 (KDBX 4) |
| Free plan | Unlimited items | Trial only | Free software | ||
| One-time lifetime price | $49.99 | Free | Free | ||
| Where others are ahead today | |||||
| Windows, Android, Linux | Android app; Windows and Linux via the read-only web viewer | Windows via iCloud | Not Android | ||
| Browser extension | |||||
| Passkeys | Coming soon | ||||
| Family / shared vaults | Shared groups | Shared files | |||
| Open source | Open format + decryptor | ||||
| Independent security audit | Reviewed by a certified ethical hacker; professional audit planned | ||||
Based on each product's public information as of 2026. Features and prices change; check each vendor's site for current details. All trademarks belong to their owners. Scroll the table sideways to see every app.
Coming from KeePassXC?
KeePassXC is excellent software, and if you live on a desktop with your own sync setup, it serves you well. CabinetPass is for people who want the same “my data, my key” approach in apps that feel at home on iPhone, iPad, Mac and Android, without assembling it from parts.
What KeePassXC does well
- Free, open-source software with public security audits
- A local database file you fully control
- Mature desktop app for Windows, macOS and Linux
- Browser extension and SSH agent integration
What CabinetPass adds
- Native apps on iPhone, iPad, Mac and Android, each designed to feel at home there, with light, dark and Pro Plus themes
- Sync with no setup: sign in to your Google Drive once. No file to move, no sync conflicts to resolve by hand
- AutoFill, Face ID and widgets built in, with no third-party iOS app needed
- Documents as first-class items: encrypted PDFs and photos with an in-app viewer and camera scanning
- 2FA codes on their logins, pinned codes, and a guide for moving codes from other apps
- Thoughtful details: share an item as text with secrets off by default, Wi-Fi QR codes, formatted notes, alerts about failed unlock attempts, a Caps Lock warning
- Item templates for cards, bank accounts, IDs, Wi-Fi and SSH servers, plus a built-in SSH terminal (Pro Plus early access)
Switching takes a minute: export a CSV from KeePassXC (Database › Export › CSV), then choose Settings › Import from Another App in CabinetPass.
Pricing
Start free. Upgrade when you need more.
Every plan has the same encryption. Paying adds space and extras, never more privacy.
Every plan oniPhoneiPadMacAndroid
Free
Forever
- Unlimited passwords, cards & notes
- Formatted Secure Notes (Markdown)
- 2FA codes (synced), generator & security check
- Face ID / Touch ID, AutoFill & widgets
- Google Drive sync across iPhone, iPad, Mac & Android
- 2 GB of encrypted files*
- Not included: Unlimited encrypted file storage*
- Not included: Future cloud features
- Not included: HD per photo, weekly breach alerts, expiry reminders, themes & app icons, Organize Groups & server categories
- Not included: Priority email support
- Not included: Pay once — no subscription
- Not included: Family Sharing
Pro Plus
Cancel anytime · billed by Apple or Google Play
- Unlimited passwords, cards & notes
- Formatted Secure Notes (Markdown)
- 2FA codes (synced), generator & security check
- Face ID / Touch ID, AutoFill & widgets
- Google Drive sync across iPhone, iPad, Mac & Android
- 2 GB of encrypted files*
- Unlimited encrypted file storage*
- Future cloud features
- HD per photo, weekly breach alerts, expiry reminders, themes & app icons, Organize Groups & server categories
- Priority email support
- Not included: Pay once — no subscription
- Family Sharing (up to 6 people, Apple)
Pro Lifetime
Pay once, yours forever
- Unlimited passwords, cards & notes
- Formatted Secure Notes (Markdown)
- 2FA codes (synced), generator & security check
- Face ID / Touch ID, AutoFill & widgets
- Google Drive sync across iPhone, iPad, Mac & Android
- 2 GB of encrypted files*
- Unlimited encrypted file storage*
- Not included: Future cloud features
- Not included: HD per photo, weekly breach alerts, expiry reminders, themes & app icons, Organize Groups & server categories
- Not included: Priority email support
- Pay once — no subscription
- Not included: Family Sharing
* Storage is yours, not ours. CabinetPass has no cloud servers. Your encrypted files are stored on your device and, if you turn on sync, in your own Google Drive, where they count toward your Google storage. The plan limit is the total size of files you can attach in the app, not space we host.
Need single sign-on, your own servers or an IT control panel? Talk to us about Enterprise
Prices in USD; local prices are shown in the App Store or Google Play. Every plan gets app updates and security fixes. Going over 2 GB never locks you out of your existing data.
One honest thing before you start.
Because nobody else holds a key, nobody can reset your master password, us included. Choose five or more random words you’ll remember, and keep a written copy somewhere safe.
Get notified at launch
One email when CabinetPass is available. No newsletter, no spam.
CabinetPass for your whole team, on your terms.
The same zero-knowledge vault, set up the way your IT team needs it. Tell us about your organisation and we’ll work out the right setup with you.
- Single sign-on. People sign in with the identity provider you already use, and access follows your directory.
- Data on your servers. Encrypted vaults live on infrastructure you own and operate, not ours and not a third-party cloud.
- A complete IT control panel. Manage people, groups, access and security policies for the whole organisation from one place.
Encryption stays end-to-end: your vault contents are never readable by us, or by your servers.
Questions
Something else on your mind? Ask in the Discord or email support@cabinetpass.com.
What if I forget my master password?
It can’t be recovered — not by you, and not by us. That’s what keeps your vault private. Choose a passphrase of five or more random words and keep a written copy somewhere safe.
Can Google read my passwords?
No. The vault is encrypted on your iPhone before upload. Google stores an encrypted file in a hidden app folder and never has the key.
Can I change my master password?
Yes: Settings › Change Master Password. Your other synced devices pick up the new password at their next sync and show a one-time notice. Face ID and the passcode keep working there; if someone types the old password, the lock screen says it was changed on another device.
How do I move from another password manager?
On iPhone (iOS 26), open Passwords › Export Data to Another App › CabinetPass: a direct, encrypted transfer. From Google Password Manager, Chrome, Firefox, Safari, 1Password, Bitwarden, LastPass, Dashlane, Proton Pass, Keeper or KeePassXC, export a CSV and choose Settings › Import from Another App; the app shows the steps for each one. Delete the CSV afterwards, because it isn’t encrypted.
What happens after 2 GB of files?
Everything you’ve saved stays available — you can still view, edit, copy, sync and fill it, and you can keep adding passwords and notes. To attach more files, upgrade to Pro for $3.99 a month or $49.99 once.
Can I switch between Pro Lifetime and Pro Plus?
Yes. Before you switch, the app shows exactly what you’ll gain and lose. Moving from Pro Lifetime to Pro Plus starts a monthly subscription; the Lifetime purchase isn’t refunded. Moving from Pro Plus to Pro Lifetime or Free turns off the Pro Plus extras, and you cancel the subscription in your App Store or Google Play settings. Your items and files are never deleted.
What files can I store?
PDFs, photos, camera scans and common documents up to 50 MB each. Every file is encrypted with its own key.
Can I check the encryption myself?
Yes. The file format is documented and the Vault Viewer is open source on GitHub. It decrypts an exported backup offline in your browser, using code written separately from the app.
When is it available?
CabinetPass is coming soon to the App Store for iPhone and iPad, the Mac App Store, and Google Play for Android. Your vault syncs between all of them through your own Google Drive. On Apple devices, one purchase unlocks Pro everywhere.
Where can I get help or suggest a feature?
Join the CabinetPass Discord for help, feedback and updates, or email support@cabinetpass.com.