Passwords without a master password
NoPassVault is a next-generation password manager that eliminates the weakest link: the master password. Your vault is unlocked using hardware security tokens you own — not something you remember.
- No master password to forget or steal
- Hardware-backed cryptographic security
- Compatible with YubiKey, Nitrokey & SoloKey
- Designed for web and Android
Why NoPassVault?
🔐 Token-based security
Access your vault using FIDO2 / hardware security tokens. Secrets never rely on a single memorized password.
🧠 No shared secrets
Master passwords can be phished, reused, or brute-forced. NoPassVault removes them entirely from the threat model.
🌐 Web & Android first
A modern web app and native Android app are being built from the ground up with security in mind.
🔎 Open & auditable design
Built with transparency and strong cryptography, aiming for a design that can be audited and trusted.
Development status
NoPassVault is currently under active development. Core concepts, cryptographic design, and platform foundations are being implemented.
- ✅ Core architecture & threat model
- 🚧 Web application (in progress)
- 🚧 Android application (in progress)
- ⏳ Public testing & documentation