Zero-knowledge architecture
Your vault is encrypted and decrypted on your device. The server only ever holds unreadable data — no one else can open it.
Nova Passwords stores and syncs your credentials with end-to-end encryption. Not even we can read them: you hold the only key.
Gmail, AWS, Azure, GitHub and hundreds more. Their passwords, API keys and tokens live encrypted under your single key.
Built from the ground up so security never costs you convenience.
Your vault is encrypted and decrypted on your device. The server only ever holds unreadable data — no one else can open it.
Your passwords on your phone and other devices, always up to date and always end-to-end encrypted.
Face ID or fingerprint opens your vault in a second, without weakening your master key protection.
Create long, unique keys for every account. No more reusing the same password everywhere.
Spot weak, reused or breached passwords and get told exactly what to fix.
A recovery code so you never get locked out. You choose where to keep it — offline and safe.
Every layer is designed so your secrets never leave your device readable.
AES-256-GCM for your data and X25519 for key exchange between devices. The same standards banks and governments trust.
Keys are derived with PBKDF2-HMAC-SHA256 on your device. The server only receives an authentication hash, never your password.
Progressive lockout after failed attempts, auto-lock on inactivity, and secure clipboard wiping.
Screen-capture protection, TOTP 2FA, and per-device trust so only your devices can get in.
Choose a strong master key. It’s the only one you’ll need to remember — never share it with anyone.
Add your passwords or import them. Everything is encrypted instantly before it’s stored.
Unlock with biometrics and sync across devices with total peace of mind.
Native app for iOS and Android. Fast, lightweight and built for everyday use.
Since no one but you can decrypt your vault, we can’t “recover” it for you. That’s why we give you an Emergency Kit when you start: keep it somewhere safe and you can regain access.
No. Everything is encrypted on your device before anything is uploaded. Our servers only hold encrypted blobs we can’t open. That’s zero-knowledge.
Yes. Sync travels end-to-end encrypted. Neither in transit nor at rest is your data readable by anyone but you.
You can start free and protect your accounts from minute one — no credit card required.
Standard, audited cryptography: AES-256-GCM, PBKDF2-HMAC-SHA256, HKDF and X25519. No homemade algorithms.
Join the people already protecting their digital life with real encryption.
Download Nova Passwords