UniPass encrypts everything on your Mac before it goes anywhere. Fill logins in one click, sync end‑to‑end encrypted, and rest easy knowing no one — not even us — can read your vault.
Fast to use, strong by default, and quiet about it.
Random passwords from 8 to 64 characters, or memorable passphrases of 3 to 10 words. Look‑alike characters are left out.
This demo runs in your browser with crypto.getRandomValues. Nothing is sent anywhere.
Keep one‑time codes next to your logins. UniPass fills them for you — even into split six‑box fields.
Autofill matches the registrable domain you saved, so look‑alike sites get nothing.
Unlock with Touch ID. UniPass locks when your Mac sleeps, clears copied secrets after 20 seconds and asks clipboard managers to skip them.
Every item keeps up to 30 encrypted versions, and verified daily backups keep restore points for the past eight weeks.
Spot breached, weak and reused passwords, insecure http:// sites and logins without 2FA. Breach checks run only when you ask, using k‑anonymity — just five characters of a hash leave your Mac.
Organised in nested collections and tags.
Bring your vault from 1Password, Bitwarden, LastPass, Chrome or any CSV. From 1Password, your collections come too.
Changes arrive in real time and queue while you’re offline. Edits to different fields merge on their own; real conflicts are yours to decide.
Privacy isn’t a setting in UniPass. It’s how the whole system is built. Here’s what happens to a single password.
Every login, note and one‑time code lives in an encrypted vault on your device. Nothing is sent anywhere unless you turn on sync.
Your master password and a 128‑bit Secret Key go through Argon2id — 64 MB of memory‑hard work — to become a 256‑bit key. Neither ever leaves your Mac.
Each record is encrypted with XChaCha20‑Poly1305 before it’s stored. Tampering is detected. Without your key, it’s noise.
Sync moves ciphertext, never keys. We verify sign‑in with a one‑way hash derived from your key, not the key itself — so even a breach of our servers exposes no vault contents.
We can’t recover it — we never have it. If you enabled a Recovery Code beforehand, you can use it to choose a new master password and Secret Key while keeping your encrypted vault.
Without a valid Recovery Code, email reset starts a new, empty vault and permanently deletes the previous encrypted vault. Support cannot undo this. Learn more.
No. Free Local keeps your vault on your Mac and works offline once your account is set up. Cloud sync starts only when you activate a trial or subscribe, and uploads only end‑to‑end encrypted ciphertext.
Apple silicon Macs running macOS 12 or later, with extensions for Google Chrome and Microsoft Edge. UniPass is also available for iPhone and iPad running iOS/iPadOS 26 or later. Intel Macs, Windows and Linux are not currently supported.
Yes. UniPass imports 1Password (.1pux or CSV), Bitwarden (unencrypted JSON), LastPass (CSV), Chrome (CSV) and any CSV with column mapping.
No telemetry, crash reports or usage analytics. With cloud sync enabled we store vault ciphertext and sync metadata — account email, device identifiers and version numbers. See our Privacy Policy.
Free on your Mac, with end‑to‑end encrypted sync whenever you want it.
