Pass1

Pass1 is a password manager for the web, built so that the server can’t read what it stores. Your vault is encrypted in your browser before anything is sent, and the server only ever holds ciphertext.

How it protects you

• Your master password never leaves your browser. The key is derived on your device with Argon2id. The server receives a separate authentication key that can’t be used to recover the encryption key.
• Everything in an item is encrypted, including site names and URLs, using AES-256-GCM.
• Padding hides lengths. Items are padded to multiples of 256 bytes, so the size of the data doesn’t reveal how long a password is.
• Items can’t be swapped. Each one is bound to its ID, so if a server swaps two items, decryption fails instead of showing the wrong password.
• Standard primitives only. It uses Argon2id, HKDF-SHA256 and AES-256-GCM, with no home-made cryptography.

What it does

• Password generator, auto-lock and clipboard auto-clear
• Checks for reused and weak passwords, done in your browser
• Encrypted export, plus import from Chrome, Edge, Safari, Bitwarden and 1Password
• Active session list with revoke, and account deletion
• Self-hosting on your own server

What it doesn’t protect against

Every security product has limits, and we publish these ones. Pass1 can’t protect you from malware or a keylogger on your own device, or from a weak master password. Like every web-based password manager, it can’t protect you if a compromised server sends you malicious JavaScript.

There is also no account recovery. If you lose your master password, your vault can’t be decrypted. That is what zero knowledge means.

Current status

Pass1 is still in development. The project has published an internal security review listing its findings and accepted risks. An independent audit is planned and hasn’t happened yet, so please weigh that before trusting it with important passwords.