Your passwords, sealed before they leave your PC.
PassCub is a password vault for Windows that lives on your own computers. Every login is encrypted there, with your master password and a key that never leaves the PC. When your PCs sync, the server in between holds sealed bytes it can't open, so it can't read a login or even tell which websites you use.
- Username
- ben
- Password
- hidden
- Website
- https://github.com/login
On your PC. The login as you see it in PassCub.
What keeps them safe
Two keys open your vault
Unlocking takes your master password and a key that exists only on that PC, protected by Windows. A copy of your vault file is useless on its own, so nobody can carry it off and try passwords against it at their leisure.
Sync that can't read anything
Your PCs exchange changes through a relay that stores padded, sealed blobs under a random ID. It never receives your email address, your master password, your keys or the names of the sites you use. There's no account to create.
Each edit travels as one small sealed record, so a change reaches your other PCs in a second or two.
Fills only where you've said it should
A login can have as many website addresses as you use it on. Each address covers only its exact site unless you widen it to the whole domain or to any port, and PassCub says in plain words where each one will fill. A look-alike phishing site never matches.
Nothing fills until you click or press the fill shortcut, and you can turn PassCub off for any page or site. You type your master password in the PassCub app, never in a web page.
Two-step codes, backed up
Give a login its authenticator key and PassCub makes the 6-digit codes. The key is sealed and synced like your passwords, so a dead PC doesn't lock you out of your accounts.
A way back in that doesn't depend on us
A recovery kit splits a spare key into shares, for example three shares where any two reopen your vault. One share on its own reveals nothing. There's no reset email, because nobody else holds a copy of your vault.
Updates it can check
PassCub updates itself, and installs an update only when it carries PassCub's release signature for that exact version. Anything else is refused.
Moving from LastPass or Bitwarden
Bring your logins, secure notes and attached files with you. If you've used both, import both: entries that appear in each come out once.
-
Export from your old password manager, or connect to it
In Bitwarden, choose Export vault and save it as .zip (with attachments), or as .json if you have no attached files. A password-protected Bitwarden export works too. For LastPass, choose Connect to LastPass in PassCub: it reads your account directly, which brings the attached files, authenticator keys and custom fields that LastPass leaves out of its CSV export. The CSV file works as well, without those.
-
Import it in PassCub
Open Settings, then Import, and pick the file or sign in to LastPass. Before anything is added, PassCub shows what it found: logins, notes and cards, and the duplicates it will merge. Logins match on website, username and password, notes match on their text, and a merged entry keeps everything from both copies. Authenticator keys come along too.
-
Delete the export file
Exports hold your passwords in plain text. PassCub offers to delete the file for you once the import is done. Connect to LastPass leaves no file behind.
The export file is read by the app on your PC and never uploaded anywhere. Connect to LastPass signs in from your PC and opens the vault there; your master password is not sent to LastPass or to us.
Get PassCub
PassCub for Windows
For Windows 10 and 11, 64-bit. It keeps itself up to date.
Download for WindowsThe installer is new, so Windows may say it doesn't recognize it. Choose More info, then Run anyway.
Browser extensions
For Chrome, Edge and Firefox. The extension fills logins, one-time codes, cards and addresses. It talks only to the PassCub app on the same PC and keeps none of your logins itself.
Coming soon to the Chrome Web Store and Firefox Add-ons.