Zero-knowledge password manager

Your passwords,
only yours.

GBpass is a password manager built so that only you can read what you save. Everything is encrypted on your device before it reaches the internet, and the keys stay with you.

Download for free See features

Free forever · No credit card · Android 8.0+ · Chrome, Firefox, Edge & Brave extensions

How GBpass protects your data A password is readable only on your phone, is sealed with AES-256-GCM in transit, and reaches GBpass servers as unreadable ciphertext, marked by a crossed-out eye.

Privacy first

Your data is none of our business.

Most services hold the keys to what you store with them, so your files can be scanned and your habits profiled. GBpass is built so that we never have access in the first place. Not “we promise not to look.” We can't.

Typical cloud storage
medical-report.pdf
family-photos.zip
diary.txt

They hold the keys. Files can be opened, scanned and profiled. You are trusting a policy.

GBpass

Only you hold the keys. We store unreadable ciphertext. There's nothing to open, scan, or sell.

What it does

One vault, and a lot less typing.

What you do with GBpass on an ordinary day.

Six item types, plus passkeys Logins, secure notes, credit cards, identities, documents and a custom type you lay out yourself. Passkeys are saved for you when a site offers one.
Autofill does the typing GBpass fills your logins in the browser and in other Android apps, and offers to save new ones as you create them.
Share an item, then take it back Send a login to named people, or through a link that expires. Manage access lists everyone who can still open it, and revoking takes a couple of taps.

How it is paid for

You're the customer, not the product.

Most free services are paid for with your data. GBpass has a free plan and is funded by subscriptions instead, so there is no reason to advertise to you or to profile you. The same goes for this website: no third-party trackers, not even tracking cookies.

Read our Privacy Policy

Under the hood

Built on standards you can look up.

Nothing here was invented by us. Every piece below is a published standard, and the security guide explains how they fit together.

Locked on your device before it syncs, with AES-256-GCM end-to-end encryption
Keys only you can derive: Argon2 + PBKDF2 from your Master Password and Secret Key
Sign in without ever sending your password, using SRP zero-knowledge authentication
A fresh, private channel for every session, set up by ECDH X25519 key exchange
Read the security guide
Vault encrypted AES-256-GCM · just now
Session key exchanged ECDH X25519 · secure channel
Identity verified SRP authentication · zero-knowledge

Start securing your passwords today.

250 MB of encrypted storage on the free plan, no credit card, no ads, no tracking. Personal adds 20 GB with a 30-day trial.

Download for free View pricing