AES-256 Encrypted Vault
Your vault is fully encrypted with your master password using AES-256. No one, not even us, can access your data. Everything stays local on your Mac.
MACOS PASSWORD MANAGER
Your credentials, locked & loaded.
Passguard is a local-first, encrypted password manager for macOS. Store credentials with custom templates, organize in folders, and back up securely, all protected by your master password.
EVERYTHING YOU NEED
Powerful. Private. Local.
Passguard is built for people who want full control over their credentials, no cloud subscriptions, no lock-in.
Custom Templates
Define reusable credential templates with custom fields. Create templates for logins, databases, SSH keys, API tokens, or anything you need.
Folder Organization
Organize credentials into nested folders. Keep Work, Personal, Databases, and more neatly separated and easy to navigate.
Plain & Secret Fields
Each template field can be plain text or secret (masked). Secret fields are hidden by default and require a click to reveal, keeping sensitive data off-screen.
Touch ID Unlock
Unlock your vault instantly with Touch ID on supported Macs. No need to type your master password every time, biometric security made simple.
Cloud & Git Backup
Back up your encrypted vault to Supabase S3 or push it as a Git commit to GitHub over SSH. Your vault is safe even if your Mac isn't.
INSIDE THE APP
See every screen
Passguard - Vault Setup
Set up your vault in seconds
Choose a master password to encrypt your vault. Passguard never stores it, you are the only keyholder.
SECURITY FIRST
Zero-knowledge. Zero compromise.
Passguard is built on the principle that your passwords belong to you and only you. No cloud syncing, no accounts, no telemetry.
Master Password Only
Your master password never leaves your device. Passguard uses it to derive the encryption key, it is never stored or transmitted.
Vault Auto-Lock
Lock your vault with a single click or set it to lock automatically. Credentials are inaccessible until you authenticate again.
Touch ID Biometrics
Enable Touch ID to authenticate instantly using macOS's Secure Enclave, no typing required, maximum convenience without sacrificing security.
Re-encryption on Password Change
When you change your master password, Passguard re-encrypts the entire vault with the new key. Old keys are discarded immediately.
ALWAYS BACKED UP
Three ways to back up. One encrypted vault.
Your vault is always encrypted before leaving your device. No matter which backup method you choose, only you can decrypt it.
Settings - Backup
Supabase S3 Cloud
Connect your Supabase project and back up the encrypted vault to your S3 bucket. Restore from a list of snapshots or grab the latest one.
Git Backup Git
Commit the encrypted vault to a local git repo and push to GitHub over SSH. Every backup is a git commit, versioned, auditable, and under your control.
Local File Export Local
Export and import encrypted vault files anytime. Keep snapshots on external drives or offline storage as an extra recovery path.
Download Passguard
Free, local-first, and open to inspect. Install the DMG, set your master password, and your vault is ready in under 60 seconds.
Download for macOS.DMGSUPPORT THE PROJECT
Buy me a coffee ☕
Passguard is free and built with love in spare time. If it saves you time or stress, consider a small donation, it means the world and helps keep development going.
$
Donate $15You'll be redirected to Buy Me a Coffee to complete your donation securely. No account needed. All major cards accepted.