Your digital world, beautifully secured.

Sycryptic is a free password manager from the Netherlands that encrypts every login, note and recovery code in your browser before anything is saved.

Create free account Sign in
AES-256-GCM
What you store, encrypted in your browser
600,000
PBKDF2 rounds between your master password and your vault key
Free
Every feature, no password limit

Everything you sign in with, in one vault

Logins, notes and recovery codes live together, encrypted before they are saved. Try the sample: search it, open an entry, and see what our server would store.

Your vault

github.com

Work

Username
alex.morgan@example.com
Password
••••••••••••••
Website
https://github.com/login
2FA code
––– –––

Decrypted on this device

Sample data, encrypted on this page with a throwaway key. The 2FA codes come from a public test key

Locked before it leaves your device

Sycryptic is end-to-end encrypted. This is what happens to your vault, in the order it happens.

  1. Your master password becomes a key

    Your browser runs it through PBKDF2 with a salt of its own. The key that comes out never leaves your device.

    PBKDF2-SHA256, 600,000 rounds

  2. A key just for your vault

    A random 256-bit vault key encrypts your entries. We only ever store it wrapped: once under the key from your master password, once under your recovery key.

    256-bit vault key, wrapped twice

  3. Each value sealed

    Names, usernames, passwords, notes and 2FA keys are each encrypted with AES-256-GCM, under a fresh random IV for every value.

    AES-256-GCM, a fresh IV per field

  4. What reaches us

    We store the sealed values and the wrapped key. Your master password passes our server when you sign in, to be checked against its hash, and is never stored. The security page lists what else we can see.

    e2ee.v1:Em6C9udmXswYddzz22i97g…
How we protect your vault

Made for every day

The vault does the remembering. Make strong passwords, fill them in with the browser extension, and see at a glance which ones need attention.

Try the generator

Make a password here, or type an example, and check it against the rules the vault's health check uses.

Generated and checked on this page. Use an example, never a real password

Meets every rule the health check looks for

  • At least 12 characters
  • Hard to guess

Password health

Sample vault
%

Almost there

12 of 16 passwords are in solid shape

  • Strong 12
  • Weak 1
  • Reused 2
  • Compromised 2

What to tackle next

  • adobe.com •••••••••••• Compromised
  • netflix.com •••••••••••• Weak Compromised
  • spotify.com •••••••••••• Reused
  • dropbox.com •••••••••••• Reused

Sample data, scored in this browser by the vault's own health check. In your vault you open an entry, generate a new password and save it

Browser extension
Fill in logins and two-factor codes as you browse, and save new logins as you sign in.
Import
Bring your passwords from Bitwarden, 1Password, LastPass, Dashlane, KeePass, your browser and more.
Sharing
Share a login with another Sycryptic user and stop sharing at any time.
Emergency access
People you trust can read your vault after a wait time you set, unless you reject the request.
Breach monitoring
Your email address is checked against known data breaches once a week.
2FA and passkeys
Sign in with an authenticator app or a passkey, with backup codes to fall back on.
Cards, identities and notes
Payment cards, identities, secure notes and recovery codes, encrypted like your passwords. Logins and identities can hold files too.
Secure Send
Share a password or a file through a link that expires. The person you send it to needs no account.

Every feature. Zero cost.

Create an account and start with your most important logins. No credit card, no checkout, no password limit.

Create free account See what's included