Platform support matrix
In progress
Platforms
Section titled “Platforms”| Platform | App | Password autofill | Passkeys | One-time codes | Unlock | State |
|---|---|---|---|---|---|---|
| Chrome, Edge, Brave, Opera, Vivaldi, Arc | Browser extension (MV3) | Yes, in the page | Yes, WebAuthn | Fill and copy | Password, device passkey, desktop app | Built, not in stores |
| Firefox 130+ (desktop and Android) | Browser extension (MV3) | Yes | Yes | Fill and copy | Password, device passkey, desktop app | Built, not in stores |
| Safari 18+ (macOS, iOS, iPadOS) | Safari Web Extension inside its own app | Yes | Yes, with the system provider | Yes | Password | Built. Not yet checked in Safari itself, only in WebKit’s extension runtime |
| Web vault | Web app | No (view and copy) | No | View and copy | Password, device passkey | Built |
| macOS 14+ | Native Mac app + AutoFill provider | Yes, system-wide | Yes, system provider | Yes (macOS 15+) | Touch ID, Mac password | Built, development builds only, not notarised |
| Windows 10/11 | Desktop app (Tauri) | Partial: extension + auto-type | In the browser. System-wide on Windows 11 with the MSIX package: built, off by default, not yet tried on real Windows | Auto-type and copy | Windows Hello, including its PIN | Built, not signed |
| Linux (X11, Wayland) | Desktop app (Tauri): AppImage, .deb, .rpm | Partial: extension + auto-type | In browsers only | Yes | polkit, otherwise password | Built. Flatpak and AUR planned |
| iOS / iPadOS 17+ | Native iPhone and iPad app + AutoFill provider | Yes, system AutoFill | Yes | Yes (iOS 18+) | Face ID, Touch ID, passcode | Built, Simulator and development builds only |
| Android 9+ | Native Android app + Autofill and Credential Manager services | Yes, with inline keyboard suggestions on 11+ | Yes (Android 14+) | Yes | Fingerprint, face or screen lock | Built, emulator and development builds only |
| Apple Watch (watchOS 10+) | Watch app, with the iPhone app | n/a | n/a | Shows codes the iPhone sends | The watch’s passcode | Built, not tried on a watch |
| Wear OS 3+ | Watch app, with the Android app | n/a | n/a | Shows codes the phone sends | The watch’s screen lock | Built, not tried on a watch |
| Terminal | CLI | n/a | n/a | octapass totp |
Password, keyring session | Built, preview |
“Partial” means the operating system has no general autofill API for third-party password managers, so Octa Pass uses the best available workaround. See autofill.
The phone apps are native: SwiftUI on the iPhone and iPad, Jetpack Compose on Android. They replaced the earlier Tauri phone apps, which showed the web vault’s screens in a web view and were removed on 2026-11-05. On a Mac, Octa Pass is a native SwiftUI app too, built from the iPhone and iPad app’s screens; it replaced the Tauri app there on 2026-11-06. The Tauri desktop app stays on Windows and Linux.
What each app can do
Section titled “What each app can do”The two native columns are the apps that will ship in the stores. Planned means required for 1.0 but not built.
| Feature | Web vault | Extension | Desktop (Windows, Linux) | Native iPhone, iPad | Native Android | CLI |
|---|---|---|---|---|---|---|
| Logins, cards, identities, notes, documents, Wi-Fi | Yes | Yes | Yes | Yes | Yes | Read, except environments |
| Environments | Yes | Yes | Web screens | Planned | Planned | Yes |
| SSH keys | Yes | Public key only | Partial | Planned | Planned | Yes |
| Attachments | Yes | Yes, with an account | Yes | Yes | Yes | No |
| Add one-time codes from a QR code | Image file | Page, image | Image | Camera, photo, file | Camera, photo, file | No |
| Show items as QR codes | Wi-Fi only | No | Wi-Fi only | Yes | Yes | No |
| Wi-Fi Connect | No | No | No | Yes | Yes | No |
| Security dashboard | Yes | Yes | Yes | Yes | Yes | No |
| Masked email, with turning aliases off and deleting them | 4 of 6 providers | Yes, no alias list | Yes | Yes | Yes | No |
| Sharing and families | Yes | Fills from shared vaults | Yes | Yes | Yes | Read |
| Emergency access | Yes | No | Yes | Yes | Yes | No |
| Two-step sign-in settings | Yes, with security keys | Sign-in only | Yes | Yes | Yes | Sign-in only |
| Change the master password | Yes | No | Yes | Yes | Yes | Yes |
| Reset it with the recovery code | Yes | Yes | Yes | Yes | Yes | Yes |
| Import and export | Yes | Yes | Yes | Yes | Yes | Yes |
| Use without an account | No, by design | Yes | Planned | Planned | Planned | No |
| Arabic, right to left | Yes | Yes | Yes | Yes | Yes | No |
| Apple Watch and Wear OS codes | n/a | n/a | n/a | Yes, off by default | Yes, off by default | n/a |
| Developer tools (plan 16) | Planned | Planned | Planned | Planned | Planned | Planned |
| Octa Pass Safe file drive | No | No | Planned | Planned | Planned | No |
The Windows passkey provider is built and off by default, but hasn’t run on real Windows yet. The SSH agent, teams, post-quantum sharing, the file safe and everything else on the roadmap are required for 1.0.