Passman - Password Manager

Passman is a comprehensive password manager, available on Android, web, Windows, and as a Chrome extension—one vault, everywhere. Zero-knowledge AES-256 and PBKDF2-SHA256 encryption: your master key is never known to Passman, nor is it stored or sent in plain text—even during cloud synchronization.

ONE VAULT, TWO TYPES OF SECRETS
• Passwords: username, password, URL, notes, expiration date, automatically detected service icon
• Optional TOTP (2FA) code on each password: 6-digit code regenerated every 30 seconds
• Access codes, in a separate list: API keys, OAuth tokens, software licenses, PIN codes, recovery codes - each with its own validation rules
• Favorites, custom groups, trash with restore function

COMPLETE SECURITY AUDIT
An overall score calculated across the entire vault (passwords and codes):
• weak, reused, duplicated, or unchanged passwords for more than a year
• expired or soon-to-expire passwords
• duplicated or reused access codes
• data leak check (HaveIBeenPwned) without ever sending your password in plain text
• voluntary exclusion of an entry from the score (accounts (test, etc.)

PASSWORD GENERATOR
From 8 to 64 characters, with independent case sensitivity for uppercase letters, lowercase letters, numbers, and symbols – on a dedicated screen or directly from the password creation form.

ANDROID AUTOFILL
Integrated into the system (Autofill + Android 14+ credential provider): suggests filling in and saving passwords in your other applications, without copy-pasting. Revealing a password or code from the list requires biometric or Master Key confirmation.

CLOUD BACKUP AND SYNC (OPTIONAL)
A separate account from the Master Key allows you to:
• synchronize multiple devices, with seamless merging even if changes are made simultaneously
• also synchronize your preferences (theme, language, columns, trash retention, etc.)
• benefit from automatic backups before any significant changes (Master Key, cloud account, reset) – restoreable with a single tap

IMPORT / EXPORT
.psm (native format encrypted by your Master Key), .json (readable), or .csv (compatible with Chrome, LastPass, 1Password, Bitwarden, Firefox, Safari, KeePassXC) – a single export covers both passwords and access codes.

PANIC-FREE RECOVERY
A configurable security question allows you to regain access to the vault if you forget your Master Key, without ever exposing it in plain text or knowing it.

PERSONALIZATION
5 color themes (Ocean, Forest, Amethyst, Sunset, Slate), light/dark/system mode, 7 languages ​​including Arabic (RTL), adjustable auto-lock delay.

CHROME EXTENSION
A lightweight companion connected to the same vault, allowing you to fill in your passwords directly in your browser.

Your secrets remain yours: all encryption is done on your device; the server never sees your data in plain text.