2Passwords keeps your logins, cards, documents and 2FA codes in one encrypted file on your Mac — not on anyone's server. Autofill in Safari and Chrome, a native Mac app, a web vault for any device, and secure access for Claude and ChatGPT. Pay once. Keep the source code.
Download for Mac Try the web vault freemacOS 14+ · Safari, Chrome, Edge, Brave, Firefox · Works offline
Feature for feature against the big subscription managers — built for one person who wants their data to stay theirs.
Strong random passwords or memorable passphrases. The extension offers to save new logins, update changed ones, and fills username, password and the 2FA code.
One extension for Chrome, Edge, Brave and Firefox, plus a Safari build. Domain-matched filling only — a lookalike site never gets your real login.
Weak, reused and breached passwords, http:// sites, sites that offer 2FA you haven't turned on, expiring cards and passports. Breach checks use k‑anonymity.
Store TOTP secrets next to the login. Codes show in the app, the menu bar and fill in the browser.
Logins, cards, bank accounts, identities, passports, licenses, SSH keys, API credentials, servers, databases, Wi‑Fi, medical records, documents with file attachments, and custom.
Mark vaults as not travel‑safe and flip one switch before a border: they disappear from the app, the extension and agents until you're through.
Send an encrypted item file plus a passphrase. The other person opens it at lnkbase.com/2passwords/share — no account, no app needed. Shares can expire.
Your vault is one encrypted file. Put it in iCloud Drive, Dropbox or Syncthing and it's on every device. Open it in the web vault anywhere.
An MCP server lets AI agents fetch only the items you explicitly flag — never the whole vault. Every access is logged. Off by default.
2pw read "2pw://Stripe/credential", 2pw run -- ./deploy with secret references in env vars, SSH keys stored encrypted, Git-friendly.
Every edit keeps the previous version. Deleted items wait 30 days in Trash. Touch ID unlock, auto‑lock, clipboard that clears itself.
CSV exports from 1Password, Apple Passwords, Chrome, Firefox, Bitwarden, LastPass and Dashlane are recognised automatically. Export anytime.
There is no 2Passwords server. There is nothing of yours to breach on our side.
Your master password and a 160‑bit Secret Key generated on your device. A stolen vault file can't be brute‑forced from a guessed password alone.
Titles, URLs, notes, attachments — not just passwords. Keys derived with PBKDF2‑SHA256 (650 000 rounds) + HKDF. Fresh nonce on every save.
You get the full Swift and JavaScript source with your purchase. Read it, build it, audit it. The file format is documented so your data is never locked in.
No telemetry, no crash reporting, no usage data, no account email. The app makes exactly one kind of network request — the optional breach check — and you can turn that off.
Browser and AI access go through a loopback‑only API that refuses web pages, requires pairing with a code shown in the app, and only ever returns items you flagged.
Honest note. 2Passwords has not yet had an independent third‑party audit. The cryptographic design, threat model and known limitations are published in the repository (CRYPTOGRAPHY.md, THREAT_MODEL.md, SECURITY‑ASSUMPTIONS.md). Passkeys and an SSH agent are on the roadmap, not in this release.
Version 1.0.0 · November 2026 · macOS 14 or later · Apple silicon and Intel
Open the DMG and drag 2Passwords to Applications. First launch: right‑click → Open (this build is not yet notarized by Apple; a notarized build follows and updates in place).
Chrome, Edge, Brave, Arc: unzip → open chrome://extensions → turn on Developer mode → Load unpacked → choose the folder. Click the icon and press Connect; approve in the app. A Web Store listing is in review.
Safari wraps extensions in a Mac app. Download the source, run scripts/build-safari.sh and open the generated Xcode project once, then enable 2Passwords in Safari → Settings → Extensions. A ready‑made Safari build ships with the notarized release.
2Passwords-source-1.0.0.zip (MIT) · SHA256SUMS · CRYPTOGRAPHY.md · THREAT_MODEL.md · SECURITY-ASSUMPTIONS.md
Mac app, browser extension, web vault, 2pw CLI and MCP server. Two‑secret encryption, 19 item types, attachments, history, Travel Mode, Watchtower, TOTP, sharing, import/export, Touch ID, in‑app connection approval, Emergency Kit PDF, developer secret scan.
1Password Individual is $35.88/year; Families is $59.88/year. 2Passwords is $39 — once.
Mac app + browser extension + web vault + CLI & MCP server + full source code. All future 1.x updates.
30‑day refund, no questions. Price in USD; VAT handled at checkout. You receive the download links and your license by email.
Create and open .2pw vaults in any modern browser at lnkbase.com/2passwords/app. Same encryption, same file. Good for a phone, a borrowed laptop, or just trying it out.
Against the personal plans of the tools people most often switch from.
| Feature | 2Passwords | 1Password | Apple Passwords | Google Password Manager |
|---|---|---|---|---|
| Price | $39 once | $35.88/yr | Free | Free |
| Your data on your own device, no account | ✓ | — | iCloud | |
| Open-source client you can audit | ✓ | — | — | — |
| Mac app · Safari · Chrome · Firefox | ✓ | ✓ | Apple only | Chrome only |
| Windows / Linux / Android | web vault | ✓ | — | Chrome |
| Cards, documents, passports, SSH keys, files | ✓ | ✓ | logins | logins |
| Built-in 2FA codes | ✓ | ✓ | ✓ | — |
| Share with people who don't use it | ✓ | ✓ | — | — |
| Watchtower / breach alerts | ✓ | ✓ | basic | basic |
| Secret Key + master password (2‑secret) | ✓ | ✓ | — | — |
| Travel Mode | ✓ | ✓ | — | — |
| CLI & secret references for developers | ✓ | ✓ | — | — |
| Scoped access for AI agents (MCP) | ✓ | business | — | — |
| Passkeys as a provider | roadmap | ✓ | ✓ | ✓ |
| Independent security audit | not yet | ✓ | ✓ | ✓ |
In one file, Your Vault.2pw, wherever you put it — by default in Application Support on your Mac, or iCloud Drive if you choose that. It is encrypted end to end; the web vault decrypts it in your browser's memory only.
Keep the vault file in iCloud Drive (or Dropbox, Syncthing…). On the phone, open the web vault, pick the file from the Files app, and unlock with your master password and Secret Key. Native iPhone and Android apps are on the roadmap.
We can't reset it — nobody can, which is the point. Choose a passphrase you'll remember and keep your Emergency Kit (it has your Secret Key) somewhere safe. Touch ID on your Mac makes day-to-day unlocking painless.
Agents connect through a local, loopback-only API after you pair them with a code shown in the app. They can only read items where you switched on “Allow AI agents” — everything else is invisible to them — and every access is logged. You can revoke a client any time.
Yes. One license covers your household's Macs. Shared items work with anyone via the free share page, and a family member can open the same vault file in the web vault with the Secret Key.
They're fine for logins on one vendor's platform. 2Passwords adds every item type (cards, documents, passports, SSH keys…), works across every browser, shares with anyone, has Watchtower, Travel Mode, a CLI, and you can read the code.
Safari requires extensions to be wrapped in a Mac app. The download includes 2Passwords for Safari.app; open it once, then enable the extension in Safari → Settings → Extensions.