Coming soon · Mac, iPhone and Chrome
Codeyzer Pass is a password manager without a server. Your vault lives on your own devices, not in a cloud; your Mac, iPhone and Chrome find each other on the same network and sync end-to-end encrypted.
We’re in final testing. The Mac app, the iPhone app and the Chrome extension will launch together.
Your passwords are never uploaded anywhere. Your devices talk directly on the same network; there is no cloud, account or third party in between.
Touch ID or Face ID opens the vault. There is no single master password to remember, forget or leak.
Each device encrypts its vault with its own key. Every sync message is sealed so that only the receiving device can open it.
Setup never touches a server or asks for your email. Your devices recognize each other with a QR code.
The keys are generated on your Mac and protected by Touch ID in the keychain. Coming from the old version? Import your entries.
Click Add a new device on the Mac and scan the code with your iPhone. When both screens show the same six-digit code, confirm.
From then on, every change reaches your other device as soon as they meet on the same Wi-Fi. You don’t even need the internet.
The device list shows which devices can open your vault and when they last synced.
One vault: in the menu bar on your Mac, above the keyboard on your iPhone, in the toolbar in Chrome.
The vault locks itself after a period of inactivity, when the screen locks or when your Mac goes to sleep.
It keeps running when you close the window and starts quietly when you log in. The Chrome extension and your iPhone can always find it.
Preview and bring in the previous Codeyzer Pass export file; importing the same file again never creates duplicates.
The key is bound to Face ID in the keychain: without authentication it isn’t handed out, not even to the app itself.
Tap a login field and pick your account from the suggestions above the keyboard; the password is filled after Face ID.
Scan the QR code on your Mac; your vault arrives on your phone within seconds.
Accounts for the site in the open tab come first; one click fills the form or copies the password.
A new entry is filled from the tab’s address and form; changes are written straight to the vault on your Mac.
The extension holds no vault; it connects to the open vault on your Mac after a one-time approval, and asks for Touch ID if it’s locked.
Long, random and strong passwords, with a strength meter.
A copied password is removed from the clipboard after the time you choose.
See which devices can open your vault, and remove a lost one from the list.
What protects your vault isn’t a server’s good intentions; it’s mathematics. The building blocks:
Entries are always written to disk encrypted. The key sits in the operating system’s secure store, bound to biometrics; plaintext exists in memory only while the vault is open.
Every message is sealed to the recipient’s public key (ECDH P-256) and the sender is verified by signature (ECDSA P-256). A captured message can’t be replayed.
The network announcement carries no device name, identity or key. The visible name changes every 10 minutes and carries tags only paired devices can recognize.
Pairing starts with a QR code and shows the same security code on both screens. No device you haven’t confirmed can join.
If an entry changes on two devices, the latest change wins; a deleted entry never comes back from an old copy (hybrid logical clock).
Once you remove a device from the list, it receives no new passwords. We recommend changing the passwords it has seen.
Codeyzer Pass asks for no account, carries no analytics or ad code and sends no data to any server. Your passwords only travel between your own devices, encrypted.
The Mac, iPhone and Chrome versions are in final testing and will launch together. Android and Windows are next.
macOS 13 or later, Apple silicon Macs
iOS 16 or later
Chrome, Brave and Edge; works with the Mac app
Interface ready; networking and autofill are next
With Windows Hello
Soon. The Mac app, the iPhone app and the Chrome extension are in final testing; all three will launch together.
When your devices are on the same network, they find each other with Bonjour and talk directly. Every message is sealed to its recipient; the network in between can’t read it.
For now your devices need to meet on the same network; changes sync the next time they do. Remote sync over your own Tailscale network is planned.
A copy of your vault stays on your other paired devices. Remove the lost device from the list on one of them; it receives no new passwords. Changes that never synced to any other device are lost with it.
Each device generates its own keys and keeps them in the operating system’s secure store. Only Touch ID, Face ID or the device passcode opens the vault.
No. The extension connects to the open vault on your Mac; the first connection asks for approval on the Mac, and it fetches a password only for the account you pick.
Yes. Preview and import the old version’s Export file in the new app. Remember to delete the file afterwards: the passwords inside are in plain text.