Encrypted passwords, notes & files,
stored in your own Git repository.
GitPassword encrypts everything locally on your device and syncs through GitHub, GitLab, self-hosted Git, or a pure local repository. Full cross-platform support across Windows, macOS, Linux desktops and iOS, Android mobile devices—with Git commit history and zero-cloud LAN Sync.
Works with any standard Git remote — 100% data ownership stays with you
Core Concept · Zero-Trust Local Encryption Model
Your Git server only sees ciphertext.
A Git-powered encrypted digital vault built for individual developers and small teams. Eliminate centralized cloud breach risks and recurring SaaS lock-in—using modern cryptography (Argon2id + AES-256-GCM) to encrypt every entry on-device before disk writes or git push.
Combines Argon2id memory-hard key derivation with authenticated AES-256-GCM encryption and an optional Vault Secret to withstand offline brute-force attacks.
No centralized master database to breach, and no monthly subscription lock-out. Keys and plaintext remain in protected local memory, sealed with AEAD tags.
Sync encrypted Git objects and commit trees through GitHub, GitLab, Bitbucket, Gitee, self-hosted Git, or local bare repos. Without your master key, nobody can inspect your data.
Complete protection for diverse digital assets, one vault for everything.
One Git-backed vault for your credentials, private Markdown notes, and confidential files—encrypted end-to-end on your device.
Professional Credentials & Identity Management
- ✓Structured Credential Archive: Usernames, passwords, website URLs, TOTP 2FA codes, SSH keys, and custom fields organized neatly.
- ✓Built-in Password Generator: Configurable high-entropy generator with customizable length and character sets to eliminate weak credentials.
- ✓Instant Fuzzy Search: Real-time multi-token search across titles, usernames, URLs, and tags so thousands of credentials are one keystroke away.
- ✓Clipboard Protection: Copied secrets are automatically cleared from the clipboard on a timer to prevent background snooping.
Encrypted Developer & Private Notes
- ✓Confidential Scratchpad: Server configs, API tokens, crypto seed phrases, and personal journals stay ciphertext at rest.
- ✓Encrypted Draft Persistence: Edits are cached locally in encrypted form so sudden crashes or power loss never discard uncommitted work.
- ✓Pure & Efficient Markdown: Equipped with a 17-tool formatting bar, live preview, and two-way synced - [ ] task checklist views from a single markdown source.
UA 930 (SFO → LHR)Confidential Files & Media Vault
- ✓Sensitive File Archive: Encrypt SSH private keys, TLS/SSL certs, identity documents, and legal contracts directly into the vault.
- ✓Large Files with Git LFS: Supports files up to 16 GiB with chunked on-demand loading, decoupled metadata, and high-performance streaming.
- ✓Common Previews & Media Playback: Preview txt, md, png, jpg, and stream mp3 audio waveforms and mp4 videos in-memory without creating plaintext temp files.
Summon anywhere, fill in milliseconds.
Never switch away from your active browser tab or terminal. Use Ctrl + Alt + Q to summon an instant search popup and Ctrl + Alt + A for zero-focus-stealing auto-typing across any application.
Brings up a lightweight, borderless translucent search panel (up to 8 candidates) centered on your active screen without waking the main window:
- •Dual Copy Shortcuts: Press Enter to copy the password (auto-cleared after timeout), or Shift + Enter to copy only the username.
- •SSH Key Protection: Displays "SSH key - Enter copies public key" for key entries. Only public keys are copied; private keys never enter the panel.
- •Tokenized Multi-field Filter: Filters titles, accounts, and URLs in real time. The selected item is clearly highlighted with a 3px accent bar.
Reads the active foreground window title (GetForegroundWindow) and injects matching credentials without stealing focus from your target input:
- •3-Tier Smart Scoring: Calculates the optimal match by host domain (weight 1000+), core tag (weight 500+), and entry title (weight 100+).
- •Atomic Injection & Clipboard Restore: Waits for modifier release, simulates {USERNAME} → Tab → {PASSWORD} → Enter, and instantly restores your original clipboard contents.
- •Multi-account Memory & 5s Countdown: Pins the last-used account for the same site with a 5-second countdown to auto-type (any key cancels); validates target window handle right before injection.
Your data, under your control — manage secrets like code.
No cloud vendor lock-in. Keep the vault local, on self-hosted Git, or on major hosting providers—and export or migrate whenever you want.
Local or Remote Git, Your Choice
Keep data on this machine or sync to GitHub, GitLab, Bitbucket, Gitee, or your own server. Whoever holds the repo holds the vault.
Open Plaintext Import / Export
Export plaintext whenever you need a backup, audit, or migration. No proprietary black box format, and no lock-out if you cancel.
Compatible with pass format
Import and export standard pass (password-store) format to seamlessly integrate with the Unix password ecosystem.
Keep data 100% off the cloud,
still enjoy iOS & Android multi-device sync.
Designed specifically for users who never want their secrets uploaded to any cloud server, but still need seamless synchronization between their computers and phones. In Local Repository mode, GitPassword provides point-to-point LAN synchronization:
- 1Available exclusively in Local Repo mode: When creating or opening a Local Repository, the desktop app (Windows / macOS / Linux) can start "Host LAN Sync Server" under Settings → Sync (temporarily pausing local edits to ensure storage consistency).
- 2Desktop generates TLS QR code & short pairing code: The desktop app hosts a TLS service on port 9418 and broadcasts via mDNS, displaying a QR code with the LAN address (e.g. 198.18.0.1:9418) and cert-fingerprint code (e.g. 7A3-VG3).
- 3iOS & Android mobile scans and syncs directly: On the same Wi-Fi network, the mobile app scans the QR code or enters the pairing code to establish a point-to-point TLS tunnel and exchange encrypted Git objects directly—zero third-party cloud involved.
Pairing
Why developers pick GitPassword?
As security awareness grows, relying on centralized commercial cloud password managers leaves developers and small teams vulnerable to vendor lock-in and breaches.
Questions, answered plainly.
Clear answers on local encryption security, Git sync, LAN Sync, cross-platform support, and Microsoft Store distribution.
Your Git, your encrypted vault.
Experience local Argon2id + AES-256-GCM encryption, global hotkey auto-fill, and Git version history on your desktop today.