SoleKey

If you're here, you're probably looking for a password manager that doesn't store your data on someone else's servers. SoleKey doesn't have servers.

Your secrets are encrypted on your device with AES-256, keyed to a PIN that only exists in your mind. Backups go to your own Google Drive as encrypted bytes — Google can't read them, we can't read them, and there's no master key. Each user's data is independently encrypted and stored separately. There is no central vault to breach.

This matters because when a centralized password manager is breached, every user is exposed. One server, millions of vaults, one break-in. SoleKey has no single point of failure — breaching one user gives an attacker nothing about any other user.

What it does:

• Passwords, usernames, and a built-in TOTP authenticator (no separate 2FA app needed)
• Credit card storage with camera scanning (OCR) and auto card-type detection
• System-wide autofill for apps and browsers
• Password health dashboard — detects weak, reused, old, and breached passwords
• Breach checking via k-anonymity (your passwords never leave your device)
• Biometric unlock backed by your phone's hardware security chip (TEE)
• Import from Chrome, Bitwarden, 1Password, LastPass, KeePass
• Export to password-protected ZIP

What it doesn't do:

• No account creation — ever
• No multi-device sync (restore from Google Drive backup when switching phones)
• No PIN recovery — if you forget your PIN, your secrets are gone. By design.

This is the trade-off: no recovery means no backdoor. Any password manager that can recover your data has stored your key somewhere. SoleKey hasn't.