Zero-knowledge password manager

Your passwords, only yours.

GBpass is a password manager built so that only you can read what you save. Your passwords, documents, and private notes are encrypted on your device before they ever reach the internet — and the keys stay with you, never with us.

Free to start · No credit card · Android 8.0+

AES-256-GCM encryption Zero-knowledge No ads, no trackers
How GBpass protects your data Diagram: a password is readable only on your phone, is sealed with AES-256-GCM encryption in transit, and reaches GBpass servers as unreadable ciphertext, marked by a crossed-out eye. Badges below read: no ads, no profiling, no tracking.
E2E
Encrypted
Zero
Knowledge Architecture
AES-256
Authenticated Encryption (GCM)
Unlimited Devices
Privacy First

Your Data Is None of Our Business

Most online services can read what you store with them. They hold the keys — so your files can be scanned, your habits profiled, your personal details turned into someone else's product. We believe your private data is the most precious thing you own online. That's why the GBpass password manager doesn't ask you to trust our intentions — it's built so that we never have access in the first place.

Typical cloud storage
medical-report.pdf
family-photos.zip
diary.txt

They hold the keys. Files can be opened, scanned, and profiled — you're trusting a policy.

GBpass

Only you hold the keys. We store unreadable ciphertext — there's nothing to open, scan, or sell.

visibility_off

We can't see your data

Everything is encrypted on your device before it syncs. Our servers only ever hold unreadable ciphertext — no employee view, no scanning, no back door. Not "we promise not to look." We can't.

key

Only you hold the keys

Your vault opens with two secrets: your Master Password and a Secret Key created on your device. Neither one is ever sent to us or stored by us — so the ability to unlock your vault never leaves your hands.

favorite

You're the customer, not the product

"Free" services are usually paid for with your data. GBpass is funded by subscriptions instead — no ads, no profiling, no selling your information. Protecting your vault isn't a side business. It's the whole business.

We practice this on our website too — no ads, no third-party trackers, not even tracking cookies. Read our Privacy Policy →

Why GBpass?

Built on proven, openly specified cryptography, GBpass pairs strong security with a consumer-friendly experience.

lock

Zero-Knowledge Security

Your Master Password never leaves your device, and only you can decrypt your vault — so even a breach of our servers would expose nothing readable.

bolt

Fast & Easy to Use

Modern UX designed for speed. Store, search, and retrieve your credentials in seconds with an intuitive interface.

verified_user

Trustworthy Platform

Built on proven cryptographic standards including AES-256-GCM, Argon2, ECDH X25519, and SRP authentication.

Built for the Way You Work

Whether you're managing enterprise infrastructure or keeping family accounts safe, GBpass has you covered.

dns

IT / SysAdmin / DevOps Teams

Securely store server credentials, API keys, SSH keys, and infrastructure secrets. Share access with team members safely.

account_balance

Financial Services & Accounting

Protect sensitive financial credentials, banking access, and client data with AES-256 end-to-end encryption.

code

Freelancers & Developers

Manage client project credentials, development tokens, and personal accounts all in one secure vault.

group

Families & Individuals

Keep online banking access, email passwords, shopping accounts, vouchers, and important documents safe for the whole family.

business

Small & Medium Businesses

Centralize company credentials and control team access without compromising security or productivity.

school

Students & Educators

Keep educational platform credentials, research accounts, and institutional access organized and secure.

The Technology Behind the Promise

A privacy promise is only as strong as the cryptography behind it. GBpass runs on publicly documented, widely reviewed standards — nothing homemade, nothing hidden — so the promise doesn't depend on taking our word for it.

  • check_circle Locked on your device before it syncs — AES-256-GCM end-to-end encryption
  • check_circle Keys only you can derive — Argon2 + PBKDF2 from your Master Password and Secret Key
  • check_circle Sign in without ever sending your password — SRP zero-knowledge authentication
  • check_circle A fresh, private channel for every session — ECDH X25519 key exchange
Learn more about our security →
check
Vault Encrypted
AES-256-GCM • Just now
swap_horiz
Session Key Exchanged
ECDH X25519 • Secure channel
verified
Identity Verified
SRP Authentication • Zero-knowledge

Start securing your passwords today

Try the GBpass password manager for free. No credit card, no ads, no tracking — just a vault only you can open.