Your passwords, sealed before they leave your PC.
PassCub is a password vault for Windows that lives on your own computers. Every login is encrypted there, with your master password and a key that never leaves the PC. When your PCs sync, the server in between holds sealed bytes it can't open, so it can't read a login or even tell which websites you use.
- Username
- ben
- Password
- hidden
- Website
- https://github.com/login
On your PC. The login as you see it in PassCub.
What keeps them safe
Two keys open your vault
Unlocking takes your master password and a key that exists only on that PC, protected by Windows. A copy of your vault file is useless on its own, so nobody can carry it off and try passwords against it at their leisure.
Sync that can't read anything
Your PCs exchange changes through a relay that stores padded, sealed blobs under a random ID. It never receives your email address, your master password, your keys or the names of the sites you use. There's no account to create.
Each edit travels as one small sealed record, so a change reaches your other PCs in a second or two.
Fills only the site it belongs to
The browser extension offers a login only on the exact site it was saved for, down to the subdomain, and only after you click it. A look-alike phishing site gets nothing. You type your master password in the PassCub app, never in a web page.
A way back in that doesn't depend on us
A recovery kit splits a spare key into shares, for example three shares where any two reopen your vault. One share on its own reveals nothing. There's no reset email, because nobody else holds a copy of your vault.
Updates it can check
PassCub updates itself, and installs an update only when it carries PassCub's release signature for that exact version. Anything else is refused.
Moving from LastPass or Bitwarden
Bring your logins and secure notes with you. If you've used both, import both: entries that appear in each come out once.
-
Export from your old password manager
In LastPass, choose Export from the account menu and save the CSV file. In Bitwarden, choose Export vault and save it as .json or .csv. A password-protected Bitwarden export works too.
-
Import it in PassCub
Open Settings, then Import, and pick the file. Before anything is added, PassCub shows what it found: logins, notes and cards, and the duplicates it will merge. Logins match on website, username and password, notes match on their text, and a merged entry keeps everything from both copies.
-
Delete the export file
Exports hold your passwords in plain text. PassCub offers to delete the file for you once the import is done.
The export file is read by the app on your PC and never uploaded anywhere.
Get PassCub
PassCub for Windows
For Windows 10 and 11, 64-bit. It keeps itself up to date.
Download for WindowsThe installer is new, so Windows may say it doesn't recognize it. Choose More info, then Run anyway.
Browser extensions
For Chrome, Edge and Firefox. The extension talks only to the PassCub app on the same PC and stores nothing itself.
Coming soon to the Chrome Web Store and Firefox Add-ons.