Your passwords live only on
your own computer and phone
Encrypted and locked on your own computer and phone — our servers never hold a copy of your vault. You decide which accounts your AI assistant can use. Buy the current major version once, updates included.
Only your master password opens it
Your master password only unlocks on your device, your vault isn't on our servers — and the crypto core is public. See how to check it
Don't take our word for it —
the code is public, check it yourself
The core code that touches your passwords and keys is fully public. Anyone can audit it independently, and it is byte-for-byte identical to what's inside the app on your computer. Security depends only on your keys, never on secret code — which is why we can lay it out in the open.
Dozens, maybe hundreds of passwords.
Can you really keep track?
Can't remember them all, so you reuse one — and when it leaks, everything goes. RootKey gives every account its own strong password, keeps them in one vault, and surfaces what's about to expire. It holds more than passwords: bank cards, IDs, Wi‑Fi, server credentials, software licenses… 18 types in all.
"Just for now" — and years later they're still there
Lives only on your devices; only your master password opens it
Paste those lines from your notes — accounts and passwords are recognised automatically
Social & email
Change it once, every device followsBanking & payments
Reused passwords get flaggedServers & dev
Available from the command line tooCredit cards
Expiring cards get surfacedMemberships & subscriptions
Surfaced before they expire — never miss a renewal2FA & passkeys
Reminds you to enable two-factor where you haven'tPasswords, handled.
One app is all you need
Generate, store, fill, sync, expiry reminders — all covered. And even we, the team building RootKey, cannot open your vault or see your passwords.
Only your master password or biometrics unlock it. Our servers hold neither your passwords nor your keys — even if we wanted to help, we couldn't.
Long, random, different for every account. Can't invent or remember them? Generate and fill with one tap.
Sync goes through a place you choose, never our servers. Two devices on the same Wi‑Fi can even talk directly, no cloud needed. Login forms in browsers, mobile apps and desktop apps fill themselves.
Connect popular AI coding assistants to fetch dev secrets and tidy items for you — only the items you share one by one, with every read logged in the AI Access center, and revocable in one tap. Off by default; active only once you connect it.
New phone or tablet? No sync setup again — choose "Join an existing vault" on the new device, scan the code on your current one, enter the same master password, done. The LAN pairing info carries a certificate: scan only, no typing, so it trusts exactly that device.
Which password is in trouble?
It keeps watch for you
Storing passwords isn't the end. Which one leaked elsewhere, which sites share a password, which ones are due for a change — one check lists them all. Fix them one by one.
Breach checks compare only a short, irreversible fingerprint — your actual password is never needed.
Is Apple's built-in Passwords
enough?
It stores website logins and that covers a lot of days. What actually gets in the way is the rest — all of it checkable for yourself.
- Stores website logins, verification codes, Wi-Fi and passkeys
- Bank cards, IDs, server credentials and licence keys have nowhere to go
- Smoothest between Apple devices; moving to an Android phone means detours
- No heads-up before a card, membership or ID expires
- No way to hand a key to an AI coding assistant
- 18 kinds of items: sites, bank cards, IDs, Wi-Fi, server credentials, licence keys…
- One vault across iPhone, Mac and Android (Windows / Linux in development)
- Picks out what's about to expire: cards, memberships, IDs
- AI coding assistants read only the keys you open, and every read is logged
- Import from Apple Passwords in one step, done in minutes
Using both is fine: keep the built-in one for web logins, and let RootKey hold everything it can't.
Already using something else?
Import it in minutes
No retyping. Export a file from whatever you use today and drop it in — cards, notes and two-factor secrets come along. From Apple Passwords it’s even simpler: export straight to RootKey.
Easy in, easy out: export an encrypted backup any time. You're never locked in.
Three steps, a few minutes
Download and try first, buy if you like it — no account needed; encryption and decryption happen on your own device, and our servers hold no copy of your vault.
Download and try free
Download RootKey and try every feature free for 14 days, no account. Buy when you're convinced.
Buy a license on the website
Pick a plan, pay with your email (Alipay); the activation code arrives in your inbox.
Activate in the app
Open Settings → License, enter your activation code, and every platform unlocks. Switching machines? Unbind in License management.
Pick your license
Pay once, use forever · free updates. One code — you choose how many devices it covers.
- Keep the unlocked version forever
- Free updates
- Every platform · nothing held back
- Keep the unlocked version forever
- Free updates
- 3 devices, transferable
- Keep the unlocked version forever
- Free updates
- 5 devices, one code
Not sure yet? Download for a free 14-day trial — full features, unlimited passwords, no account.
When the trial ends we won't hold your passwords hostage — everything you saved can still be viewed, copied and exported; and keeps syncing; only adding and editing need a license.
Security by design, not by promise
Your master password is only ever used on your own device to unlock, and is never uploaded. If you turn on sync, only encrypted content leaves the device — to us it's meaningless bytes we can't open.
Works fully offline. To sync, pick one of four: a local folder, WebDAV, iCloud Drive or Dropbox — all places you own, none of them ours. Or scan a code and let two devices talk directly over the same Wi‑Fi, no cloud at all. Even the storage credentials you enter are encrypted on the device and unreadable once the vault is locked.
A recovery key is generated when you create your vault, and you're guided to print it as an emergency kit. Forget the master password and the key lets you reset it without losing data — closing the gap where nobody could help you.
Pay once and keep using the current major version forever, with free updates. No monthly or yearly fees — you're a customer, not a recurring charge.
The extension holds no keys and never decrypts your vault. It asks the desktop app for one credential at a time, for the current site — a design that avoids the whole "decrypt everything inside the browser" attack surface.
Your master password goes through brute-force-resistant processing before it unlocks anything, every record is encrypted separately, and passwords copied to the clipboard clear themselves — the same standards mature password managers follow.
Are my passwords really never uploaded?
How do I sync to a new phone or computer?
What if I forget my master password?
Which platforms are supported?
Why is there no Secret Key like 1Password's?
I use Apple Passwords / 1Password / Bitwarden today. Can I move over?
What happens to my passwords when the trial ends?
Buy once — will I ever have to pay again?
How long is the trial, and how do I buy?
Every password, in one vault only you can open
Set up in five minutes. Your data lives on your devices, not on someone else's server.
Download free · 14-day trial