Octa Pass documentation

Octa Pass is a free password manager. It keeps every login, passkey and one-time code you own in one encrypted vault, synced to every browser, phone and computer by the free Octa Pass service. The code is open source (MIT), so anyone can check it, and organisations can run their own server with the same apps.

Project status: public alpha

The free service is open for sign-ups in the web vault at vault.octap.app. The apps are built but not in the app stores yet, and nothing has had its external security audit. Each page shows a status badge: planned, in-progress, beta or stable. Features that aren’t built say so. See the roadmap.

What Octa Pass stores

• Logins with passwords, website URLs, TOTP secrets, passkeys and recovery info
• Passkeys, synced across your devices
• Payment cards, identities and addresses for form filling
• Secure notes, documents, SSH keys, environments and Wi-Fi networks
• Planned: bank accounts, API credentials, software licences, ID documents and more

See item types for the full list.

Principles

1. Zero-knowledge. Your vault is encrypted on your device. The server only ever stores ciphertext. See the security overview.
2. Same code everywhere. The hosted service runs exactly the published MIT code. Self-hosters get every feature.
3. No lock-in. Full export in open formats, always free.
4. No ads, no trackers. Not on the website, not in the apps, not ever.
5. Safe by default. Autofill never fills silently on a domain that doesn’t match exactly.

Where to start

If you want to…	Read
Understand what Octa Pass is	Overview
See how your data is protected	Security overview
Check platform support	Support matrix
Run your own server	Self-hosting overview
Move from another password manager	Import overview
Contribute code or docs	Contributing
Point an AI agent at these docs	Docs for AI agents