Everything in one list
Logins, cards, bank accounts, Wi-Fi, notes, 2FA and passkeys in one alphabetical list. Copy with the button on the row; swipe right to copy, swipe left to add to favorites.
SyncPass · Android and Windows
SyncPass keeps your passwords, cards, passkeys and 2FA codes (Premium) encrypted on your phone. We keep no copy of your vault on our servers, and your master password never leaves your device.
Android 7.0 and later · 25 items free · 12 languages · No ads
New · Version 1.0
It totals closed areas by the codes it reads from the text next to them, writes the results into the drawing and exports to Excel. Free for 7 days from first launch.
Video
The vault, search, 2FA codes, the security score and why your data stays on your phone. Narration is in Turkish.
When you press play, the video loads from YouTube (youtube-nocookie.com). All videos →
What's new
Android 4.5 · Desktop available (Windows MSI and Microsoft Store)
Pinned search, filter chips, favorites, live 2FA codes and swipe to copy.
The home screen and the health screen now show the same score and the same warning.
The app no longer changes weak passwords by itself; you decide what to fix.
Even if the app closes while you pick a file, the import resumes where it left off after you unlock.
The app does not read your clipboard at launch; copied passwords are marked as sensitive content.
The same colors as Android, a three-column layout, light and dark themes and 12 languages.
Android app
The vault screen was redesigned: search is always at the top, filters are one tap away and 2FA codes run live on the home screen.
Logins, cards, bank accounts, Wi-Fi, notes, 2FA and passkeys in one alphabetical list. Copy with the button on the row; swipe right to copy, swipe left to add to favorites.
Sign in to apps and browsers with one tap through Android Autofill and Credential Manager. On Android 14 and later SyncPass can store your passkeys.
Scan a site's QR code and the 6-digit code lives in the same entry as the password, with a countdown timer; tap to copy. Import accounts from Google Authenticator's export QR.
Weak, reused and leaked passwords (the breach check is Premium) are counted separately. The banner on the home screen and the health screen use the same calculation; "Fix" takes you to the item and does not change your password for you.
Open the vault with your fingerprint; the biometric key stays in the Android Keystore.
Export an encrypted backup file, or put it in your own Google Drive (Premium). Import from other password managers.
A recovery key that opens the vault if you forget your master password. Print it or keep it on another device in a safe place. We cannot reset it for you, by design.
Choose the length and character types, see the strength instantly and add it to an item with one tap.
On a wide screen the bottom bar gives way to a side menu and the content fills the screen. Landscape and portrait both work.
SyncPass Desktop · Windows
The same encryption, vault format and security score as Android. Download it free for Windows, and fill sign-in pages from the vault on this computer with the Chrome extension.
Categories, list and details side by side. When the window gets narrow, details open above the list.
Ctrl+Shift+P in the app and Ctrl+Shift+Space from anywhere open the quick access window; Ctrl+C copies the password, Ctrl+B the username.
A copied password is not written to Windows clipboard history or the cloud clipboard.
Light and dark themes follow the system; you can pin one in settings.
Version 1.4.15 · Windows 10 (2004) or Windows 11, 64-bit
Add the extension from the Chrome Web Store →
Free version or Premium (monthly, yearly, lifetime), up to 3 computers · Details, plans and pricing →
Security
We keep no copy of your vault on our servers. Your vault is an encrypted database on your phone, opened by your master password, your fingerprint or your recovery QR code.
Master password
Known only to you. Never stored, never sent anywhere.
PBKDF2 · 600,000 iterations
Your password is stretched with HMAC-SHA256 into the encryption key, so guessing attempts become expensive.
AES-256-GCM + SQLCipher
Passwords and other sensitive fields are also encrypted one by one; the whole database is encrypted too.
Your vault contents never reach us, and your master password and vault key are not sent in any of the cases below. The app also makes connections that carry no vault contents for Google Play purchase checks and passkey verification. The main things that use the network are listed below; some run automatically once you turn them on.
Drive sync (optional, Premium)
If you turn it on, the already encrypted vault file is uploaded to your own Google Drive; once on, this runs automatically (on Android about every 12 hours).
Password breach check (Premium)
Only the first 5 characters of the password's SHA-1 hash are sent to Have I Been Pwned (k-anonymity); the password itself is never sent.
Email breach check (Premium, Android only)
Runs only if you enter your own Have I Been Pwned key; then, automatically every 7 days, the email addresses found in your vault items are sent to Have I Been Pwned. Without your key this check never runs.
In-app help (Android only)
A question you type into the Android help screen is sent to Google's Gemini service to be answered. Vault contents are never sent. Don't type passwords or personal information there. SyncPass Desktop does not do this.
Vault security report (optional, Premium, Android only)
If you ask for it, summary numbers about your vault (security score, item count, number of weak, reused and leaked passwords, email breach count, which protections are on) are sent to Google's Gemini service to write the report. Passwords, usernames and item names are not sent. SyncPass Desktop does not do this.
Desktop license (SyncPass Desktop only)
When you activate the license, and then automatically about once a week, your license key, a random device number generated by the app and the app version go to ostlertech.com. Vault contents do not; the free version does not make this connection.
Android system backup (if it is on in your phone)
Android's own automatic backup saves the app settings to your Google account: the check value and salt used to verify your master password, and the wrapped key for the recovery QR. The vault database and your personal details are not part of this backup.
Pricing
No ads. Move to Premium when your vault grows: monthly, yearly or a one-time lifetime purchase. Prices are shown in Google Play in your local currency.
SyncPass Desktop: free version and SyncPass Desktop Premium for up to 3 computers · Plans and pricing
No. Your vault is an encrypted database on your phone and we keep no copy of it on our servers. If you turn on Drive backup, the encrypted vault file goes only to your own Google Drive. Features that use the network are listed above.
You install SyncPass and buy Premium through Google Play with your Google account, and Drive backup uses your own Google Drive. Your vault is opened by a master password you set on your device, and that password never leaves it.
Yes. You can import the files other managers export from the app's backup screen.
No, your items stay in the vault. You cannot add new items beyond the free limit, and Premium features such as 2FA codes and Drive backup turn off; they come back when you subscribe again.
Yes. The Android app is on Google Play (Android 7.0 and later) and SyncPass Desktop for Windows uses the same vault format. There is no iPhone or Mac version, and we are not giving a date for iOS or macOS.
With Premium, the current 2FA code sits in the same entry as the password, so you copy both from one place. You can also move your accounts from Google Authenticator by scanning its export QR code.
We cannot reset it because we never know it. Create a recovery QR code in Settings after setting up the vault and keep it somewhere safe; it can unlock the vault from the lock screen.
The free version stores up to 25 items on Android and 15 on desktop and has no ads. Premium adds unlimited items, 2FA codes, Drive backup and breach checks. Prices are shown in Google Play in your local currency.
Questions? destek@ostlertech.com · Privacy · Terms · Refunds