CiFort is a free password manager with no server and no database. Your vault is encrypted on your device with AES-256-GCM (key derived via PBKDF2-SHA256 at 600,000 iterations) and stored in storage you already own — your Google Drive, your iCloud, or locally on the device. Your master password never leaves your browser, so not even the developer can read your passwords.
Why CiFort
- Zero-knowledge encryption: all cryptography runs client-side using the browser's native Web Crypto API — no third-party crypto libraries.
- You own the storage: the encrypted vault lives in your own Google Drive, iCloud, or on-device storage.
- Strong password generator: cryptographically secure random passwords and passphrases.
- Defense in depth: clipboard auto-clears within 10 seconds, and five wrong unlock attempts trigger an exponential-backoff lockout.
- Portable and recoverable: export an encrypted backup file and restore your vault on any device with just your master password.
- Free forever: no accounts, no subscriptions, no tracking of your secrets.
How it works
Create a master password, pick where the encrypted vault should live, and start saving credentials. Every save re-encrypts the whole vault before it is written anywhere. On a new device, connect the same storage and enter your master password — the vault decrypts locally and you are back in.