Under the hood
Every layer of PassWard is built on proven cryptographic primitives. No proprietary algorithms, no shortcuts, no trust required.
GCM authenticated encryption. Every ciphertext is integrity-checked -- tampering is detected and rejected before decryption.
Memory-hard KDF that resists GPU and ASIC brute-force attacks. Your master password becomes a 256-bit key that only your device computes.
Industry-standard mnemonic seed. Write it down once, recover your vault on any device -- no email, no phone number, no account.
2^256 possible keys. Even every computer on Earth working together until the sun dies would not try a meaningful fraction of them.
Zero outbound connections. PassWard never contacts any server -- not for sync, not for analytics, not for updates. Fully offline.
On supported devices, the encryption key is stored in a tamper-resistant hardware security module. Extraction requires physical access to the chip.
A deliberate choice
Autofill is convenient. It is also the largest attack surface in every password manager that offers it. Here is what can go wrong.
Malicious apps draw invisible forms on top of legitimate ones. Your autofill engine fills them in, silently handing credentials to an attacker. The user sees nothing.
Fake sites include invisible form fields. Autofill populates them with your email, address, or credit card without your knowledge -- you only see the username field.
When your vault lives on someone else's server, one breach exposes everyone. The 2022 LastPass breach leaked encrypted vaults for 33 million users. Offline-only eliminates this risk entirely.
Browser extensions run with broad permissions. A hijacked update or supply-chain attack turns a trusted extension into a credential harvester -- with full access to every page you visit.
Android autofill relies on accessibility services -- the same permissions used by banking trojans and spyware. Granting them to a password manager widens the attack surface for every other app.
You open PassWard. You see your password. You type it yourself. No invisible forms, no background services, no network requests. The password never leaves your screen and your fingers. That is security you can verify.