Autofill and passkeys
Sign in to apps and browsers with one tap through Android Autofill and Credential Manager. On Android 14 and later SyncPass can store your passkeys.
SyncPass · Android and Windows
SyncPass keeps your passwords, cards, 2FA codes and passkeys encrypted on your phone. No account to create, and your master password never leaves your device.
Android 7.0 and later · 15 items free · No ads · 12 languages
Features
Logins, cards, bank accounts, Wi-Fi, notes, 2FA and passkeys, in one alphabetical list on your phone.
Sign in to apps and browsers with one tap through Android Autofill and Credential Manager. On Android 14 and later SyncPass can store your passkeys.
Scan a site's QR code and the 6-digit code lives in the same entry as the password, with a countdown timer. Import accounts from Google Authenticator's export QR. (Premium)
Open the vault with your fingerprint; the biometric key stays in the Android Keystore.
Export an encrypted backup file, or put it in your own Google Drive (Premium). Import from other password managers.
Create an offline recovery key in case you forget your master password. We cannot reset it for you, by design.
SyncPass for Windows uses the same encryption and vault format as Android, in 12 languages.
Security
SyncPass is not tied to a server. Your vault is an encrypted database on your phone, opened only by your master password or your fingerprint.
Master password
Known only to you. Never stored, never sent anywhere.
PBKDF2 · 600,000 iterations
Your password is stretched with HMAC-SHA256 into the encryption key, so guessing attempts become expensive.
AES-256-GCM + SQLCipher
Each field is encrypted on its own, and the whole database is encrypted again.
The complete list. Your vault itself never goes to us.
Drive backup (optional)
If you turn it on, the already encrypted vault file is uploaded to your own Google Drive.
Breach check
Only the first 5 characters of the password's SHA-1 hash are sent to Have I Been Pwned (k-anonymity); the password itself is never sent.
In-app help (Android only)
A question you type into the Android help screen is sent to Google's Gemini service to be answered. Vault contents are never sent. The Windows app does not do this.
Windows license check (Premium only)
SyncPass for Windows Premium sends only your license code, a random device ID and the app version to activate the license. The free version never connects.
Pricing
Premium prices are shown in Google Play in your local currency.
SyncPass for Windows: free version and SyncPass Desktop Premium for up to 3 computers.
Yes. Your vault is an encrypted database on your phone and SyncPass does not need a server to work. Nothing syncs to our servers because we do not run any for your vault. Optional features that use the network (Drive backup, breach check, in-app help) are listed above.
No. You set a master password on your device and that is it. There is no email sign-up and your master password never leaves your phone.
Yes. The Android app is on Google Play (Android 7.0 and later) and the Windows app uses the same vault format. iOS and macOS versions are not available.
With Premium, the current 2FA code sits in the same entry as the password, so you copy both from one place. You can also move your accounts from Google Authenticator by scanning its export QR code.
We cannot reset it because we never know it. Create a recovery QR code in Settings after setting up the vault and keep it somewhere safe; it can unlock the vault from the lock screen.
The free version stores up to 15 items with no ads. Premium adds unlimited items, 2FA codes, Drive backup and breach checks. Prices are shown in Google Play in your local currency.
Questions? destek@ostlertech.com · Privacy · Terms · Refunds