MyPwdTool

Name: MyPwdTool — Download free. Password Manager
Availability: InStock
Rating: 5 (1 reviews)
Author: TDucray137

MyPwdTool — Free Download. Password Manager

MyPwdTool is a password manager built around one simple idea: your data should never be readable by anyone but you — not MyPwdTool, not a cloud provider, not anyone. The vault, browser extensions, AutoFill, password health checks, breach checks, TOTP two-factor codes, passkey metadata storage, and encrypted backups all work fully offline and cost nothing — no feature limits, no time limit, no account or sign-up of any kind, on any platform. The only paid feature is multi-device synchronization, an affordable yearly subscription that keeps your passwords in sync across macOS, iOS, Windows, and Android without a central cloud database. Devices talk directly to each other through a relay server whose only job is to pass encrypted messages along; it has no concept of a vault, a password, or a user account, and could never read your data even if it were compromised.

★★★★★

5.0(1 ratings)

Download MyPwdTool (Official links)

File size: 291.6 MB

The latest version of MyPwdTool is: 1.7

Operating system: Windows, Mac OS, Android

Languages: English, Spanish, French, German

Developer: TDucray137

Price: $0.00 USD (Freemium product ($3 per year or free version))

Encrypted vault for passwords. The core storage system holds all your login credentials — website addresses, usernames, passwords, and associated notes — in a fully encrypted container. Each sensitive field is independently encrypted with AES-256-GCM, meaning that even within the vault, individual pieces of data are isolated from one another. The vault file on disk reveals nothing about its contents without the correct master password. No plaintext password, username, or note is ever written to disk, memory dumps are minimized, and the encryption keys exist only in volatile memory during an unlocked session.
Passkey metadata storage. Modern authentication increasingly relies on passkeys, which are cryptographic credentials tied to a device or platform. MyPwdTool stores metadata about your passkeys — which services they belong to, when they were created, and associated account information — so you retain a complete inventory of your authentication methods. This metadata helps you track where passkeys are registered without exposing the private key material itself, which remains in your platform's secure enclave or credential manager.
TOTP two-factor codes. Time-based one-time password generation is built directly into the vault. You can store TOTP secrets alongside your passwords, and MyPwdTool will generate the rotating six-digit codes needed for two-factor authentication. The TOTP secrets are encrypted with the same AES-256-GCM protection as all other sensitive fields. Codes are generated on-device with no network request, so they remain available even when you are offline. This eliminates the need for a separate authenticator application while keeping the secrets inside the encrypted vault.
Payment card storage. Credit and debit card details — card numbers, expiration dates, cardholder names, and security codes — can be stored in the encrypted vault as separate entries. Each field receives independent encryption. This allows you to keep payment information available for online purchases without relying on a browser's built-in autofill, which may store data with weaker protection. Card entries can be organized, searched, and retrieved alongside password entries.
Multiple independent vaults. MyPwdTool supports the creation of several separate vaults, each with its own master password and encryption keys. A typical configuration might include one vault for personal accounts and another for work-related credentials. Because the vaults are cryptographically independent, unlocking one does not grant access to another. This separation limits exposure if one master password is compromised and allows different backup or synchronization policies for each vault.
Browser extensions and system AutoFill. Extensions are available for Chrome, Edge, and Firefox on macOS and Windows, plus a native Safari extension on macOS and iOS. On iOS, macOS, and Android, a system-level AutoFill provider integrates with the operating system's credential filling framework. The extensions and AutoFill provider communicate with the vault to fill usernames, passwords, and TOTP codes into websites and applications. All matching and filling happens locally, with no data sent to external servers during the autofill process.
Password health audit. The health audit examines the passwords stored in your vault and flags weak, reused, or old credentials. Weak passwords are identified by length and character composition analysis. Reused passwords are detected by comparing hashed representations within the vault. Old passwords are flagged based on the time since they were last changed. The audit runs entirely on-device, and the results are presented as a report that helps you prioritize which credentials to update first.
Breach check with k-anonymity. MyPwdTool can check whether your passwords have appeared in known data breaches by querying the Have I Been Pwned service. The check uses k-anonymity: only the first five characters of a SHA-1 hash of your password are sent to the service, and the matching is completed locally. This means the service never receives your password or its full hash. The feature is optional and can be run manually or as part of the health audit. Results indicate which passwords appear in breach corpora so you can replace them.
Encrypted local backups. You can create encrypted backup files of your vaults and restore them when needed. Backups use the same AES-256-GCM encryption as the live vault, so the backup file is protected by your master password. Backups can be stored on external drives, network locations, or any storage medium you choose. The backup process does not transmit data over the network unless you place the backup file in a synced folder yourself. Restoring a backup replaces or merges with the current vault, depending on your choice.
CSV import and export. MyPwdTool can import credentials from CSV files exported by other password managers or spreadsheet applications. During import, the data is encrypted into the vault. Export produces a CSV file containing your credentials in plaintext, which you can use for migration to another tool or for manual review. The export function includes a warning about the sensitivity of the resulting file. Import and export are performed locally, and no data is sent to external servers during either operation.
Full local activity log. The activity log records events within each vault, such as unlocks, failed unlock attempts, entry creations, modifications, deletions, imports, exports, and synchronization events. The log is stored locally and encrypted with the vault. It provides an audit trail that can help you detect unauthorized access attempts or understand changes to your credential database. The log includes timestamps and event types but does not record the plaintext contents of your entries.
Per-vault synchronization reminders. For vaults configured to synchronize across devices, MyPwdTool tracks the last successful sync time. If a vault has not synchronized within a configured interval, a reminder is displayed. This helps you notice when a device has been offline for an extended period or when synchronization has failed silently. Reminders are generated locally based on the sync history stored in the vault, and they do not require a network connection to appear.
Multi-device synchronization without accounts. The optional synchronization feature keeps vaults consistent across macOS, iOS, Windows, and Android devices. Devices connect directly to each other through a relay server that forwards encrypted messages. The relay has no concept of a vault, a password, or a user account, and cannot read any data even if compromised. Creating a new sync group or inviting additional devices requires an annual subscription, but joining a group someone else created is free. One subscription covers every device in the group.
Master password and biometric unlock. Your master password is used once, locally, to derive an encryption key via PBKDF2-HMAC-SHA256 with 400,000 iterations. The master password is never stored and never leaves your device. Between master-password prompts, you can unlock with Face ID, Touch ID, Windows Hello, or your fingerprint, on a schedule you define. If you forget the master password, no recovery mechanism exists — not even the developers can restore access to the vault.
No tracking or analytics. MyPwdTool contains no analytics, no advertising, no third-party SDKs for tracking, no account system, and no server-side storage of your vault or its contents. The relay server used for optional synchronization is designed to be incapable of reading user data, and its source code is planned for publication to allow independent review. The application does not phone home, does not collect telemetry, and does not require an internet connection for any feature other than synchronization and the optional breach check.

MyPwdTool was created by developer TDucray137 and has been under development since 2023. The program is written in Swift for macOS and iOS, Kotlin for Android, and C# for Windows, with shared cryptographic logic implemented in Rust for consistency across platforms. The development effort focused on building a password manager that operates fully offline by default, with no account system and no server-side storage of user vaults. The multi-device synchronization feature was added later as an optional paid component, using a relay-based architecture that avoids a central database. The project is made in France, and the relay server's source code is planned for publication to support independent security review.

Alternatives to MyPwdTool: