Master password unlock
Set a master password on first launch, then unlock on every start; 5 wrong attempts trigger a 5-second cooldown.
Local edition
Your passwords,stay on your computer.
Password Manager is a local-first password manager. Your master password is used only on your device to derive a key; the vault is written to disk as AES-256-GCM ciphertext — no cloud account, no server, no data upload.
Download for macOS (Apple Silicon)Download for macOS (Intel)Download for Windows (x64)View security design
- Master password never touches disk or leaves your device
- Argon2id + AES-256-GCM
- Auto-locks after 60 seconds
Features
Everyday password management, done properly
We do one thing: keep the passwords on a single computer reliably encrypted and easy to use.
Encrypted vault
All entries are written to a single vault.enc, encrypted with AES-256-GCM and a fresh nonce per write.
Entry types & custom fields
Login, API key, card and secure note types; add security codes, PINs, recovery codes and more to any entry, with secret values hidden by default.
Instant search
Search across name, URL, username, notes, tag names and custom field labels, case-insensitively; secret field values are never searched.
Categories, tags & favorites
Create categories and tags, pin favorites to the top; deleting a category or tag unbinds entries instead of deleting them.
Expiry reminders
Set an expiry date on API keys, certificates or cards and get reminded 7–90 days ahead in the list, after unlocking and in the security report.
Password generator
8–64 characters, four character classes freely combined, ambiguous characters excludable, seeded by the OS CSPRNG.
Safe copy
Usernames, passwords and custom fields are written to the clipboard by the Rust layer, cleared after 10 seconds by default, and never clobber what you copy later.
Auto-lock
Locks after 60 seconds of inactivity by default, adjustable from 30 seconds to 30 minutes; locking zeroizes in-memory keys.
Weak & duplicate passwords
7 weak-password rules and duplicate grouping for login entries, listing only entry names — never showing passwords in reports.
Encrypted backup
Export backup.enc; imports preview and verify before overwriting. Restore on a new or reinstalled machine too.
Verifiable implementation docs
Encryption notes, data format, security notes and a user guide ship with the project, with every parameter auditable.
Security design
Security is a verifiable chain, not a slogan
From master password to ciphertext on disk, every step has explicit parameters and boundaries. These are the implementation facts of the current version.
Master password only derives a key
Argon2id derives a 32-byte key locally (64 MiB memory / 3 iterations / 4 parallelism / 16-byte random salt). No master password copy is kept after derivation.
Encrypted before it hits disk
The vault is encrypted with AES-256-GCM, a fresh 12-byte nonce per encryption, and the file header as additional authenticated data — tampering with KDF params, salt or ciphertext fails verification.
Atomic writes
Writes go temp file → fsync → read-back verify → rename. A failed write keeps the original file; you never end up with half a vault.
Locking zeroizes memory
Keys and plaintext entries are cleared with zeroize; the frontend also clears the selected entry, form and plaintext state on lock.
Clipboard & exit
Copies go through the Rust layer; on expiry, lock, window close or exit it attempts to clear, comparing content first so it never wipes something you copied later.
- Argon2id · 64 MiB / 3 / 4
- AES-256-GCM
- 12 B nonce regenerated per encryption
- Atomic rename
- 60-second default lock
- 10-second clipboard clear
What this version does not defend against
Spelling out the boundaries matters more than inflating promises.
- Malware that has already gained administrator access (can read process memory, log keystrokes)
- Cold-boot attacks and memory dumps (no mlock, no memory encryption)
- A too-weak master password — there is a strength threshold, but a threshold is not a guarantee
- Physical coercion, screen capture and malicious input methods
- Cloud sync, accounts and team sharing: not yet implemented
- Failed-attempt counting lives only in process memory and resets on restart; backup import bypasses the cooldown
Interface
A structure you can read at a glance
Filters on the left, list in the middle, details on the right. A tool should let you close it faster.
Search
git
GGitHuboctocat
GGitLabdev@sample.test
Search across name, URL, username, notes, tags and custom field labels, case-insensitively.
Copy & details
Usernameoctocat Copy
Password•••••••••••• Copy
Clipboard clears after 10 seconds
Copies are written to the system clipboard by a Rust command; the frontend does not call the browser clipboard API directly.
Settings
Auto-lock1 minute
Clipboard clear10 seconds
ThemeFollow system
Auto-locks after 60 seconds of inactivity by default, adjustable from 30 seconds to 30 minutes.
The above is an interface mockup with sample data, not a real screenshot.
Download
Download Password Manager
macOS (Apple Silicon / Intel) and Windows x64 are available now; each platform's version is shown on its card below.
macOS · Apple Silicon
v0.4.0 · 2.9 MB · 2026-10-20
SHA-256
e4d92bed109aba52cb0c90d2cdc9907a5ad546836335f7e64bc0e15eda7252c7Verify after download:shasum -a 256 "password-manager-0.4.0-macos-arm64.dmg"
macOS · Intel
v0.4.0 · 3.1 MB · 2026-10-20
SHA-256
15e20dd6407373874eae90a7f75be5733000ffdeeaca35c07c5008b7cdb4ab28Verify after download:shasum -a 256 "password-manager-0.4.0-macos-x64.dmg"
Windows · x64
v0.4.0 · 2.2 MB · 2026-10-20
SHA-256
461d868985e0bfb237ec91121903b4950b37427cc1f63ef396855f765bc0e5a6Verify after download:certutil -hashfile "password-manager-0.4.0-windows-x64-setup.exe" SHA256
Windows · x64 (MSI)
v0.4.0 · 2.9 MB · 2026-10-20
SHA-256
1e63776a16a08d0a1fd5b70072689078988ae647dd5def93ffd29f8733f4a9aaVerify after download:certutil -hashfile "password-manager-0.4.0-windows-x64.msi" SHA256
Installation
macOS
- Download the .dmg that matches your Mac (Apple Silicon or Intel), open it, then drag "Password Manager.app" into "Applications".
- On first open, if you see "cannot verify the developer", right-click the icon in "Applications" → choose "Open".
- Alternatively, run the following command in Terminal to remove the quarantine attribute. Verify the SHA-256 above first:
xattr -dr com.apple.quarantine "/Applications/Password Manager.app" - Set a master password on first launch (≥10 characters, ≥3 character classes) and immediately export a backup.enc.
Windows
- Download and run the Windows installer (.exe) and follow the wizard (or use the .msi for Group Policy / command-line deployment).
- SmartScreen may warn about an "unknown publisher" — choose "More info → Run anyway". Verify the SHA-256 first.
- Set a master password on first launch (≥10 characters, ≥3 character classes) and immediately export a backup.enc.
The master password cannot be recovered.
If you forget it, the only recovery path is a previously exported backup.enc plus the master password at that time. The publisher has no reset capability.
FAQ
Questions you may have
Are my passwords uploaded to any server?
No. The app connects only to the official website to check for and download cryptographically signed updates. Requests contain no master password, vault contents or account information; the vault stays on your computer as ciphertext.
What if I forget my master password?
It cannot be recovered. The master password is not stored anywhere, and we cannot reset it. The only recovery path is a previously exported backup.enc plus the master password at that time.
Where is my data stored?
macOS: ~/Library/Application Support/com.local.passwordmanager/; Windows: %APPDATA%\com.local.passwordmanager\. vault.enc is the encrypted vault, backup.enc is the encrypted backup, and settings.json holds only non-sensitive settings.
Which platforms are supported?
macOS (Apple Silicon and Intel) and Windows x64 are available now. The Linux build pipeline is prepared but has not run, so no Linux download is offered.
Can I sync across devices?
Not yet. Cloud sync, accounts and team sharing are later phases; the current version is a single-machine local vault.
Does it auto-lock?
Yes. It locks after 60 seconds of inactivity by default, adjustable to 30 seconds, 1, 5, 10 or 30 minutes.
How do I verify a download is not corrupted or replaced?
This page provides the SHA-256 checksum and a verification command, so you can confirm the file matches the release. Because the checksum and the installer come from the same site, it only proves they match each other; cross-check the checksum through an independent channel where possible.
Why does the app show as "Password Manager" after download?
The installer and app productName are still the English "Password Manager", shown in Finder, the Start menu and window titles; "密码管家" is the public brand name. Download only from this site and verify the SHA-256 to avoid same-named impostors.
Is the app open source?
The current public distribution does not ship an open-source license, so this site does not claim open source. Encryption notes, data format and security docs ship with the project for implementation review.
Publisher
About us
Password Manager is developed and published by Beijing Huaxin Interactive Digital Technology Co., Ltd. We treat it as a long-term foundational tool: get local encryption, key lifecycle and verifiable details right first, then talk about sync and collaboration.
Local-first
Data that can stay on the device does not go to a server.
Verifiable
Encryption parameters, data format and security boundaries are written as docs, not just marketing copy.
No overclaiming
Platforms and capabilities that are not yet verified are not written as delivered.