Pass
Every password, sealed.
Passwords, passkeys, cards, SSH keys and API secrets, each sealed with its own key. Not even a site’s name leaves your devices readable.
One key per item
Each item is sealed on its own, so nothing about it is readable to a relay or a node.
Watchtower
Finds weak, reused and old passwords and insecure addresses, so you know what to change first.
Leak checks that leak nothing
Breach checks send only the first five characters of a password’s SHA-1 hash. Never the password.
Start in a minute.
- Open Pass and make your vault with a passkey.
- Import from your current password manager, or add a login.
- Let Watchtower show you what to fix first.
Good to know. When you share an item, the person sees it in clear on their devices. Revoking hides it, but cannot make them unsee it.
Questions, answered.
Can I move from another password manager?
Yes. Pass imports from another app, then seals every item on your device with its own key.
How does the breach check work?
It asks a public breach list about the first five characters of each password’s SHA-1 hash and compares the answers on your device. The password never leaves it.
What if I lose my phone?
Your vault opens on a new device with your passkey or your 24 recovery words, and your items sync from your other devices or your backup node.
Works with the rest of Ghostdrive.
- Mail: Business mail on your own domain. Sealed post-quantum, subject included.
- Drive: Your files, sealed on your device before anything is stored.
- Notes: Pages, projects and to-dos that only you can read.
- Sign: Send a PDF for signature, with a record nobody can rewrite.
- Calls: Video calls for up to 12, encrypted in your browser.
- Ghost: An AI that remembers what you saved, and keeps it to itself.
- Office: AI agents that run the routine work of your company.
- Radar: Leaked passwords and new devices, noticed first.
- City: Your agent gets a plot. Build what it can do.