Offline & Zero-Knowledge

Your Passwords,
Your Control.

A modern password manager built for privacy. 100% offline, zero-knowledge encryption, with both a polished GUI and a powerful CLI. No cloud. No subscription. Just security.

Download for Windows Purchase License

Currently available for Windows. macOS & Linux coming soon.

Passlock — Offline Password Manager - passlock: Your vault, offline. Forever. | Product Hunt
Features

Built for Privacy-First Users

Everything you need to manage passwords securely — without ever trusting a third party.

100% Offline

Your data never leaves your device. No cloud servers, no sync, no telemetry. What happens on your machine stays on your machine.

Zero-Knowledge Encryption

We can't see your passwords — and neither can anyone else. Argon2id key derivation + AES-256-GCM encryption with a verifier that never touches disk.

GUI + CLI

One binary, two interfaces. Use the polished Slint-based GUI for daily browsing, or the full-featured CLI for scripting and automation. No compromises.

Smart Password Generator

Generate strong, cryptographically random passwords with real-time strength evaluation. Customize length, character sets, and exclude ambiguous characters.

Password Rotation Reminders

Set per-entry rotation intervals. The GUI checks on startup and gently reminds you when it's time to update your passwords — no background daemons, no system notifications.

Encrypted Backup & Restore

Export your vault as an encrypted backup file. Import with merge or replace strategies. Safe migration between machines — no cloud required.

Security

Military-Grade Encryption,
Zero Trust Required

Passlock is built on a foundation of proven cryptographic primitives. Your master password is never stored, never transmitted, and never recoverable by anyone but you.

  • Argon2id — Memory-hard key derivation (64 MiB) with configurable passes, resistant to GPU/ASIC attacks
  • AES-256-GCM — Authenticated encryption with AAD binding to prevent tampering and downgrade attacks
  • HMAC-SHA256 Verifier — Constant-time master password verification separate from the GCM tag
  • OS-Level Entropy — All random numbers sourced from the operating system's secure RNG
  • Memory Safety — Written in Rust with Zeroizing wrappers for sensitive data
# Vault file structure (on disk)
{
  "version": 2,
  "salt": "base64...",
  "kdf": {
    "name": "argon2id",
    "mem_cost": 65536,
    "time_cost": 2
  },
  "verifier": "HMAC-SHA256",
  "ciphertext": "AES-256-GCM"
}

# Everything is encrypted at rest.
# No plaintext ever touches disk.
$ passlock add github -u myuser
Enter password: ********
Entry added: github

$ passlock generate -l 24
xK9#mP2$vL7@qR4!nW8&cF3^

$ passlock list --filter git
github myuser github.com

$ passlock get github -c
Password copied to clipboard
Power User Ready

GUI or CLI —
You Choose

Passlock ships as a single binary with two interfaces. Launch without arguments for the polished GUI, or use the full-featured CLI for automation, scripting, and keyboard-driven workflows.

  • 17+ CLI commands — add, get, edit, delete, list, search, generate, export, import, and more
  • Named parameters — clean, intuitive argument parsing with clap
  • Hidden password input — secure interactive prompts, never in shell history
  • Clipboard integration — copy passwords with automatic timed clearing
Tech Stack

Engineered for Performance

Built with Rust for speed, safety, and a minimal footprint.

Rust
Memory-safe language
Slint
Native GUI framework
Argon2id
Key derivation
AES-256
GCM encryption
Get Started

Ready to Take Control?

Download Passlock today. One-time purchase. No subscription. No cloud. Just security.

Currently available for Windows 10/11 x64 · macOS & Linux coming soon