Unlock on your device
Your vault master password and derived key never leave your client.
Zero-knowledge password manager
The key to your secrets
The key to your secrets
stays with you.
PWS is a multi-platform password manager where vault contents are encrypted on your device. The server securely stores and synchronizes ciphertext—it never learns your secrets.
✓ Client-side encryption
✓ Open formats
✓ Mobile-first PWA
Personal vault
Locked
Workencrypted collection••••••
Personalencrypted collection••••••
Sharedprotected by key envelope••••••
Simple use, strict boundaries
The server sees synchronization, not your secrets
The cryptographic workflow uses only standard, auditable primitives and shared test vectors.
Authenticated encryption
Entries are stored in a versioned, interoperable AEAD envelope.
Ciphertext synchronization
The API handles only encrypted payloads, key envelopes and minimal metadata.
Security by design
Even the administrator cannot see vault contents
The Master Admin can manage accounts and the system but cannot export vaults, request keys or decrypt data.
An important, honest limitation
No cloud password manager can fully protect against a compromised device, keylogger or modified client code.
- 01Separated keysThe API device key can never be a vault encryption key.
- 02Replay protectionTimestamp, one-time nonce and signed body hash.
- 03Minimal loggingPasswords, MFA codes, keys and plaintext payloads are never logged.
- 04Phased deliveryEvery security layer includes automated negative tests.
On every important device
One vault across all your devices
Mobile PWA
Installable responsive interface prepared for encrypted offline caching.
Windows client
.NET 9 client with DPAPI/Credential Manager device-key protection.
Shared vaults
Roles, per-member key envelopes and key rotation when a member is removed.
One-time sharing
Client-side encryption, URL-fragment key and atomic one-time access.
CSV and KDBX
Client-side import/export with clear plaintext security warnings.
Password generator
Cryptographically secure passwords, passphrases, PINs and API secrets.
Directory service
Organization user and group synchronization prepared for Microsoft 365 and Google Workspace directories.
Browser extensions
Your vault is with you at sign-in fields
Pair the extension with your signed-in PWS profile, then use saved accounts only on the site’s exact origin.
0.1.2
Chrome
Chrome and Chromium-based browsers.
Download0.1.2
Brave
Packaged release for Brave.
Download0.1.2
Firefox
Firefox WebExtension release.
DownloadInstallation and web profile pairing are explained in Help after sign-in.
Current pricing
Transparent plans
Displayed prices include VAT. The current discount is automatically applied to annual billing.
Free
0 Ft
100 entries, 1 device and CSV import.
Personal
1 905 Ft/month
Unlimited entries, 5 devices and encrypted offline access.
Annual billing21 717 Ft5.00% discount included
Family
3 797 Ft/month
Per-person license with personal and shared family vaults.
Annual billing43 289 Ft5.00% discount included
Team
31 750 Ft/month base fee
+ 3 797 Ft/user/month
Monthly base fee with roles, shared vault and audit log.
Annual billing361 950 Ft5.00% discount included
Detailed plan contents
Features by plan
The Team monthly base fee includes organization features; its per-user fee equals the current Family monthly price per person.
| Feature | Free | Personal | Family | Team |
|---|---|---|---|---|
| Encrypted entries | 100 | Unlimited | Unlimited | Unlimited |
| Personal devices | 1 | Up to 5 | Up to 5 / user | According to company policy |
| Web vault and mobile PWA | ✓ | ✓ | ✓ | ✓ |
| Browser extensions | ✓ | ✓ | ✓ | ✓ |
| Secure notes | ✓ | ✓ | ✓ | ✓ |
| CSV and password-protected KDBX import | ✓ | ✓ | ✓ | ✓ |
| External time-limited item sharing | — | ✓ | ✓ | ✓ |
| Folder sharing between registered users | — | ✓ | ✓ | ✓ |
| Shared family vault | — | — | ✓ | — |
| Roles and folder permission matrix | — | — | — | ✓ |
| Central export permission management | — | — | — | ✓ |
| Organization audit and user management | — | — | — | ✓ |
| Mobile approval | — | — | — | Add-on |
Available separately
Add-on services
Optional services available alongside any plan.
ADD-ON
Google Connector
29 210 Ft/month
Google Gsuite Business címtár kapcsolat.
Annual total332 994 Ft5.00% discount included
ADD-ON
M365 Entra Connector
31 750 Ft/month
M365 címtár szolgáltatás, Tartomány vezérlő nélkül.
Annual total361 950 Ft5.00% discount included
ADD-ON
RADIUS szerver
25 400 Ft/month
Menedzselt RADIUS szolgáltatás VPN, Wifi, Nas, központi hitelesítéshez.
Annual total289 560 Ft5.00% discount included
Frequently asked questions
The essentials
No. In the zero-knowledge model, vault content reaches the API already encrypted by the client.
Not without the recovery key. An administrator can assist with account access but never knows the vault master key.
The web PWA is responsive on phones, tablets, iPads and desktop browsers. The Windows client and browser extension use the same versioned API contract.
PWS newsletter
Product news and security notices
Product updates, offers, maintenance notices and important security alerts.