WardenKey

Your passwords stay on
your own devices.

WardenKey is a password manager that keeps your vault encrypted on your PC and phone. No account is needed, and nothing leaves your device unless you turn on a feature.

Download WardenKey How it works

For Windows, Linux and Android. No subscription.

Local first

Your logins, cards and notes live in an encrypted vault on your own device. It works with no internet at all.

You hold the keys

The vault opens with your passphrase, and with Windows Hello, Linux sign-in or your fingerprint. We never have your keys, so we cannot read your vault.

Sync only if you want it

Turn on sync to keep your PC and phone in step. What we store is encrypted on your device first. A new device joins only when one of yours approves it.

Everything you need, nothing you don't

The everyday things a password manager should do, built to be quick and clear.

Fill and save logins

A browser extension for Chrome, Edge and Brave fills sign-in forms and offers to save new ones. On Android, autofill works in apps and browsers.

Passkeys

Create and use passkeys, including on Android, where signing in by scanning a QR code on another screen also works. They sync between your devices.

Security check

See weak, reused and old passwords at a glance, with a score. Optionally check whether a password has appeared in a known data breach.

Strong passwords

Generate passwords and passphrases with the options you choose, and copy them with one tap. Copied passwords clear themselves from the clipboard.

Cards, notes and identities

Keep more than logins: payment cards, secure notes and identity details, all in the same encrypted vault.

Easy to switch

Import your logins from RoboForm and bring them across in one step.

How it works

A few simple ideas keep your vault safe.

Your vault is made on your device. It is encrypted with a key built from your passphrase, and on a phone also a secret held by its secure hardware.
Sync is optional. If you turn it on, your device encrypts the vault first and sends only the scrambled copy. The server just passes it between your devices and cannot open it.
Your devices vouch for each other. To add a phone, you approve it from a device you already have by comparing a short code. Knowing your email address is never enough to get in.
Checks are optional and private. The breach check sends only a short fragment of a scrambled password, so the service can't tell which password you checked. It runs only when you tap it.

Download

Current version for desktop: 0.18.7. The app updates itself and checks every update's signature before installing.

Windows

Download the zip, unzip it, and run WardenKey.

Download for Windows

Windows may show a SmartScreen warning the first time, because the app is not yet code-signed.

Linux

Choose the package that suits your system.

AppImage .deb package

Android In testing

The phone app joins your PC's vault, fills logins in apps and browsers, and handles passkeys. It is in testing on Google Play now, and a public release is coming. To try it, email support@wardenkey.com.

Browser extension Coming soon

The Chrome, Edge and Brave extension is being prepared for the Chrome Web Store.

Honest about where we are

WardenKey is new. Here is what to know before you rely on it.

Not independently audited yet

We test it heavily ourselves, but an outside security review has not happened yet. We will say so here when it does.

Keep your Recovery Key

If you forget your passphrase, the Recovery Key is the only way back in. We cannot reset it for you, because we do not have your keys.

Some features are desktop only

Importing files, scanning cards and the cleanup reports are on the PC for now.

Questions

Is my vault stored in the cloud?

Only if you turn on sync. Then an encrypted copy is stored on our sync server so your devices can keep in step. We cannot read it. With sync off, nothing is stored in the cloud.

Do I need an account?

No. You only sign in, with your email address and a code we send you, if you choose to use sync.

What does the leaked-password check send?

Only the first five characters of a one-way scramble of each password, to the Have I Been Pwned service. It cannot tell which password you meant, and it runs only when you tap the button.

What if I forget my passphrase?

Use your Recovery Key, which you were shown once when you set up. Without it, the vault cannot be opened by anyone, including us.

How much does it cost?

There is no subscription.

How do I delete my data?

See how to delete your account and data.

How do I contact you?

Email support@wardenkey.com.