Vaults can be cracked.
Your mind can’t.
Passwords are still the weakest link. More than 97% of identity attacks are password attacks. Microsoft Digital Defense Report 2025, via The Record
WordCrypt creates your password the moment you need it, from inputs only you know. Your passwords are never stored or synced, not on your device and not in the cloud. There's no vault to breach and no passwords to steal.
US Patent 9,647,839 · Vaultless Password Management System · Works locally, offline
Be among the first.
We're building and testing the WordCrypt apps now. Choose how you'd like to join.
Test WordCrypt before anyone else and help shape it. Accepted testers get WordCrypt Pro free, including the next major upgrade.
Apply for the betaReserve your spot among WordCrypt’s first backers. We’ll send you a special Founding Member offer before launch.
Reserve my spotBe first to hear when WordCrypt launches, with an early-bird offer for people on the list.
Join the listFree to joinUnsubscribe anytimeWe never share your email
Hackers don't break in.
They simply log in.
The vault model assumes the vault won't be cracked. The headlines disagree.
Historic LastPass Breach Enabling Cryptocurrency Theft.
Blockchain analysts at TRM Labs traced about $35 million in cryptocurrency stolen by cracking LastPass vaults taken in the 2022 breach, with thefts continuing more than three years later.
Read on TechRadar (opens in a new tab)Study Uncovers 25 Recovery Attacks in Major Cloud Password Managers.
ETH Zurich researchers found 25 attacks by which someone controlling a vendor's servers could, in some cases, expose passwords stored in Bitwarden, LastPass and Dashlane vaults.
Read on The Hacker News (opens in a new tab)Malware Can Hijack Passkeys Synced by Chrome's Password Manager.
Palo Alto Networks' Unit 42 showed how malware on a Windows PC can abuse Google Password Manager in Chrome to take over accounts and steal the master key protecting synced passkeys.
Read on BleepingComputer (opens in a new tab)Engineered around… nothing.
No password database, no backup, no sync server, no recovery email — and therefore, none of their failure modes.
Zero storage
Passwords are derived in memory and discarded after submission. No password is ever written to a file, a database or the cloud.
Domain-bound
The destination URL is part of the input. A secret phrase and PIN that yield one password on acme.com yield a different one on bank.com.
Deterministic
Same inputs, same output, every time. Recover your passwords on any device with your personal registration token. No vault required.
Offline by default
Your passwords are created right on your device. No network connection is needed to make one.
Biometric option
Type your phrase, or unlock with fingerprint or facial scan on supported devices. Your phrase never leaves the device.
Everywhere, for everyone
Every major browser and operating system, phone apps and desktop programs, even for accounts you share with your family or team, without texting or emailing passwords.
One small step to log in.
One giant leap in security.
Click the WordCrypt popup in any password field.
Your WordCrypt password generator opens locally — accessible and visible only to you.
Enter your phrase, or unlock it with biometrics.
A memorable line in any language — typos and all. They make it uniquely yours. Spaces and capitalization are ignored.
Enter your PIN. A domain-unique password is derived and submitted.
Same inputs always yield the same password — on any device, with no sync, no cloud, no record.
Which WordCrypt User Are You?
At every level, your passwords are never stored.
Choose during setup. Change it anytime.
- 01 · Most secure
Purist
Tower shieldNothing saved. Each time, you type your username, phrase and PIN, plus any unique site rules.
- 02 · Saved Settings
Planner
Knight’s shieldSite settings saved on this device. You type your phrase and PIN.
- 03 · Shared Settings
Traveler
Round shieldSettings shareable across your devices. You type your phrase and PIN.
- 04 · Most convenient
Express
Light shieldSettings shareable, phrase unlocked with fingerprint or face. You only type your PIN.
Site settings include any unique password rules, the increment # for forced password changes, and your username or email address for that site.
Ready to retire your rented vault?
Pay once. Use it everywhere. Keep your passwords to yourself.
Best for trying WordCrypt.
- Generate up to 10 passwords daily
- Use on any one device
- Core password generation
- Join a family or team share
- No passwords stored. Ever.
Unlimited. Private. Yours.
- Unlimited passwords
- Full customization & constraints
- Up to 5 of your devices
- Windows, Mac, iPhone, Android, Linux, and major browsers
- Share accounts with family or your team, and invite them free
- No passwords stored. No passwords to steal.
Pro users can create a share. Anyone they invite can join with WordCrypt Free.
Questions, answered.
What is WordCrypt, and how does it work?
WordCrypt is a password generator that runs on your own device and never stores your passwords. Think of it as a password calculator with no memory. Enter your secret phrase and PIN, and it instantly works out a strong, unique password for the site you're signing in to. The same inputs give the same password every time without having to save it anywhere.
If my passwords aren't stored, how do I get the same password every time?
Your phrase, your PIN, the website's address and your personal registration token go through a multi-layer, one-way process. The token comes from the email address you registered with, and the app adds it for you in the background every time. Because the token is unique to you, someone else using the same phrase and PIN would still get different passwords.
How is WordCrypt different from password managers like LastPass or 1Password?
Conventional password managers keep all your passwords in an encrypted vault, and vaults can be stolen. WordCrypt has no vault. It creates each password when you need it and forgets it right after, so there are no stored passwords to steal.
Does WordCrypt encrypt my password?
No, and that's deliberate. Encryption is for data you plan to unlock and read again later. WordCrypt uses a series of one-way processes instead. Your passwords can't be reverse engineered to reveal your phrase or PIN, not even by us.
So is WordCrypt unhackable?
No system is truly unhackable. But WordCrypt gives attackers no stored passwords to break into, and it's built with extra protections against anyone trying to work backwards from a password to your phrase or PIN. We're also building in keylog scrambling, designed to protect what you type from keystroke-logging malware.
What if my phone or computer is lost or stolen?
Your passwords aren't on it, so there are no passwords to steal. Your PIN is never saved, and if you chose to save your phrase, it only opens with your fingerprint or face, so a thief can't create your passwords. Install WordCrypt on your new device, enter your phrase and PIN, and your passwords are right back.
Does WordCrypt need the internet?
Not to make passwords. Every password is created on your device, and your phrase, PIN and passwords never leave it. You only need a connection once to register and to activate Pro on each device.
What happens if I forget my phrase or PIN?
Don't, as no one can recover them, not even us. That's the point: there's no copy on our servers or in any cloud for anyone to find. If you want a backup, write them down and keep them somewhere safe, such as a home safe, a safe deposit box or with your will.
How do I choose a good phrase and PIN?
For your secret phrase, pick something you'll always remember but others wouldn't connect to you. Make it your own by adding a word, mixing languages or misspelling on purpose, because famous quotes and song lines on their own are among the first things attackers try. For your PIN, use 4 to 8 letters and/or numbers with personal meaning that's hard for others to guess, and avoid patterns like 1234 or your birth year. Capitals and spaces are ignored in both, so you don't need to remember them.
A website makes me change my password. What do I do?
Use Advanced Options and tell WordCrypt you need a new password for that site and save the change. WordCrypt then creates a fresh password for that site only. It records a small counter for the site in an encrypted file on your device, never the password itself. If you share your settings file with your other devices, they'll all produce the new password too.
What if a website requires or forbids certain characters?
Set the site's rules once in Advanced Options and WordCrypt remembers them for that site in an encrypted file on your device, which you can share with your other devices.
Can I import my existing passwords?
There's nothing to import, because WordCrypt creates new passwords instead of storing old ones. Switch over one site at a time: sign in, choose “change password,” and use the password WordCrypt creates. Most people start with their most important accounts.
Can I export my passwords?
There's no stored list to export, because WordCrypt never stores your passwords. That's on purpose: an export button would be a dangerous tool in the wrong hands. And if you ever switch password managers, there's no rush. WordCrypt isn't a subscription and never expires, so it keeps creating your passwords while you move over one site at a time.
What if I change my email address?
Your passwords don't change. The email you registered with works like a username for WordCrypt, so keep using it even if you no longer use that mailbox. You can update the email we use to contact you at any time.
Can I share passwords with my family or team?
Yes. With WordCrypt Pro you can create a share for accounts you use together, like Wi-Fi, streaming or utilities. Each person creates the same password on their own device, so no one has to text or email it. Your personal accounts stay private: people in your share can only create the shared passwords.
Do the people I share with need to buy WordCrypt?
No. Anyone you invite can join your share with WordCrypt Free. If you later remove someone, WordCrypt helps you change the shared passwords so they no longer work for that person.
What will it cost, and can I use it on more than one device?
WordCrypt Free creates up to 10 passwords a day on any one device. Pro is a one-time $39 for unlimited passwords, full customization and use on up to 5 of your devices, with free updates within your version. There's no subscription; you own it forever.
What happens to my passwords if WordCrypt the company goes away?
They keep working. WordCrypt runs on your own device and doesn't need our servers to create your passwords, and there are no passwords to sync or store. Your purchase never expires, so the copies you've installed keep creating the same passwords for as long as your devices run them.
What happens if I exceed my 10-password daily limit on WordCrypt Free?
WordCrypt Free creates up to 10 passwords a day, and the phrase and PIN panel shows how many you have left. If you run out, you can borrow up to 3 from tomorrow, so you're never locked out of an important account. Your passwords renew at midnight, or upgrade to Pro for unlimited passwords on up to 5 devices.
Can I install WordCrypt Free on more than one device?
WordCrypt Free is for one device, and you can move it to a new device anytime. To use WordCrypt on your phone, computers and tablet, upgrade to Pro, which covers up to 5 of your devices for a one-time price. Your passwords come from your phrase and PIN, so every device gives you the same passwords, with nothing to sync.
Still have a question? Contact us