Overview

In progress

Octa Pass is in public alpha. The free service is open for sign-ups in the web vault at vault.octap.app. The apps are built and tested, and they’re coming to the app stores soon. See the roadmap.

Octa Pass is a free password manager, an alternative to 1Password, Bitwarden, LastPass and Dashlane. You create an account on the free Octa Pass service, install the apps, and your vault syncs everywhere. It is built around four ideas:

• Free, with nothing to set up: unlimited passwords, passkeys and devices, family sharing for up to 6 people and 1 GB for files. No trial, no ads.
• Everything in one vault: passwords, passkeys, TOTP codes, cards, identities, addresses, masked emails and the recovery details of each account.
• End-to-end encryption: encryption happens on your devices. The server, including the people who run it, can’t read your vault. See encryption.
• Open source: the service runs published MIT code that anyone can audit. If you want to, you can also run your own server and point the same apps at it.

Who it is for

1. People leaving a paid or closed password manager over price or trust.
2. Families who share some logins and keep others private (families of up to 6 are free).
3. Developers who want a CLI and SSH keys, and organisations that need to run their own server.

Small teams and organisations are planned for 1.0.

How it works

1. You create an account with your email and a master password. Your device also generates a Secret Key and a recovery code and puts both in your Recovery Kit.
2. Your device derives encryption keys from the master password and Secret Key. It encrypts each item before anything is uploaded.
3. The sync server stores the ciphertext and notifies your other devices of changes.
4. Each device decrypts locally after you unlock it with your master password, or with biometrics on a trusted device.

Hosted or self-hosted

	Octa Pass Cloud (free)	Self-hosted
Code	Published MIT code	The same code
Features	All	All
Attachments	1 GB per account	You choose
Data location	EU by default	Your server
Who runs it	The Octa Pass project	You

The free Octa Pass service is the default in every app. To use your own server, choose Self-hosted at sign-in; see connect the apps to your server.

Not planned

• Ads, analytics SDKs or third-party trackers
• Reading your email inbox or SMS
• Masked phone numbers
• Storing any of your data unencrypted