PassholdPassword manager by Keyrook
Passhold fills your logins from the sign-in field, keeps your passkeys and makes up strong passwords. Everything is encrypted on your computer before it syncs to your others, so Keyrook stores it and cannot read it.
Version 0.2.1 for Chrome and Edge on your computer. Free forever, and open source.
NNorthwind
Sign in to your account
EmailEverythingLoginsCardsAddressesNotes
On northwind.example
Everything
What it does
Filling, saving, passkeys and checkouts — at the moment you need it, in the page you are on.
Filled from the field, with one click.
Click a sign-in field and Passhold offers the logins saved for that site. Pick one, and it is filled in — in forms inside frames too, as many banks and shops build theirs.
Saved as you sign in.
Send a sign-in form and Passhold asks whether to keep the login — or to update the password, if it changed.
Save login to Passhold?
Nalex@example.comon northwind.example
Never for this siteSave
Passkeys, kept with your logins.
When a site offers a passkey, Passhold saves it with the login for that account and signs you in with it — on every computer you use.
Save a passkey for northwind.example?
alex@example.comPasskey · northwind.example
Save it elsewhereSave passkey
Cards and addresses, at checkout.
The same button in a checkout's fields fills the card or the address you choose — and offers to save the one you just paid with.
Strong passwords, made up for you.
On a sign-up form, Passhold offers a new strong password and fills it in, then offers to save it once the form is sent.
tR8#wv2-Kq9&zLm4^hX7
Very strong · 128 bits
Length20
a–zA–Z0–9!#$
Leave out look-alikes (I l 1 O 0)
AnotherUse this password
On every computer
Passhold starts with a free Keyrook account — the one Keyrook Authenticator uses. Each item is sealed on your computer before it syncs: Keyrook's server stores it, and learns no password, no name and no site.
Make your account with Google or GitHub, or with an email address and a password of its own. An email address is proved with a six-digit code.
Touch ID or Windows Hello opens Passhold — or a PIN while the browser stays open, or a security key you add. No master password to make up and remember.
Sign in and everything comes down: with your password, your passkey, or the same code shown on a computer already signed in.
Your account comes with one, for the day nothing else is left. Keyrook holds nothing that opens your vault.
Also in your vault
Kept beside your logins and synced with them. A note is shown only in Passhold, never filled into a page.
File anything in a folder, and add fields such as a PIN or a security question's answer, hidden until you ask.
Deleting moves an item to the trash, and a changed password is kept in the login's history.
After the time you choose, and when the computer locks. A copied password is cleared from the clipboard soon after.
Import the CSV your browser or password manager exports. Export to CSV, or to an encrypted backup you keep yourself, at any time.
Following your browser, or your choice. A keyboard shortcut opens your vault from any page.
Imports from
Security
Passhold seals everything on your computer before it goes anywhere, and keeps what it fills out of the page's reach. Here is how.
Every item is encrypted with AES‑256‑GCM under a random key. The key that opens your vault never reaches Keyrook.
Keyrook's server learns your email, when you sync and how many items you have — never a password, a name, a site or a folder. A record it alters will not open.
A login is offered only on the site it was saved for: alice.github.io
and mallory.github.io are two sites, so a look-alike page gets
nothing.
The page you are on never holds your vault. Passhold's list is its own page, framed in, which the website cannot read — and it will not act if the website covers it.
No ads, trackers or analytics. Site icons are built in, never fetched, so no server learns where you have accounts.
The code is published under GPL-3.0. Each claim in its security design names the test that tries to break it.
Price
Everything on this page is free, for good, for everyone. Paid plans add extras on top — paid for on the web, never in the extension — and nothing here will ever move behind them.
Questions
Yes: Passhold starts with one, and it is free. Make it with Google, GitHub or an email address. It is what brings your logins to your other computers, and back if this one is lost — and the same account works for Keyrook Authenticator.
No. Each item is encrypted on your computer before it is sent, with a key Keyrook never receives. Keyrook stores what you sync and cannot read it, nor which sites your logins are for.
Chrome and Microsoft Edge, on Windows, macOS and Linux. Passhold is for computers: there is no phone app.
Your account's recovery key, with a code sent to your email, sets a new one. Lose both, and nobody can open what you kept — so keep the recovery key somewhere safe, apart from your email. An account made with Google or GitHub has no password to forget.
Yes. Export them as a CSV file — from Bitwarden, as JSON — and import it in Passhold's settings. Cards, addresses and notes in the file come too. How to.
Yes. They share your Keyrook account and keep separate things: Passhold your passwords, Keyrook Authenticator your two-factor codes. Each has a key of its own, so nothing Passhold holds opens your codes.
Free forever, for Chrome and Edge on your computer.