Your passwords stay on your own device.

What you get

• No networking code of its ownNot we promise not to upload — the app cannot. There is no server, no account, no analytics, no crash reporting and no third-party SDK. The one thing that ever touches the network is buying 8PWD 2026 Pro, and that is Apple's StoreKit talking to Apple in Apple's own process — we receive nothing from it. Airplane Mode changes nothing about how the vault works.
• iPhone, iPad and Mac — each done properlyOn iPhone, a Home tab that shows your grade and every feature, plus tabs you arrange yourself. On iPad, a sidebar with two-column lists that adapt to the width and to Split View. On Mac, a sortable table with an inspector, keyboard shortcuts, drag and drop, several windows, and Touch ID to unlock. One purchase of Pro covers all three on the same Apple ID.
• Encrypted where it mattersPasswords, two-factor secrets, notes, deleted items and password history are stored as AES-256-GCM ciphertext. Names, field labels and folder names stay readable so search works instantly — a deliberate trade, and one we would rather state than hide.
• One key, up to three locksA random 256-bit data key encrypts your vault. On a fresh install it sits in this device's Keychain, so the vault opens as soon as the device is unlocked; turn on Face ID or Touch ID for the app under Security if you want a prompt every time. Turn on anti-theft encryption and a master password wraps a copy of that key; the 12-word recovery phrase wraps another. We hold none of them, there is no master key and no escrow — we could not open your vault if a court asked us to.
• Easy Mode, for parents and grandparentsChoose it on first launch or under Me › Appearance › Easy Mode / Standard. Big text, big input fields, and four equal buttons at the bottom: add a password, print all, import, export. Language, Standard and More sit right under the title; a visible scroll bar shows there is more below. Every feature of Standard is still one tap away under More › Advanced features, custom fields included, and the vault is the same one — switch back and forth as often as you like.
• Make it yoursEleven color schemes — Amber, Navy, Crimson, Emerald, Gilt, Graphite, Violet, Azure, Teal, Rose and Mocha — change the accent color of the whole app; tap one in the list and it changes on the spot, before you decide (Pro). Text size under Me › Appearance is a list of sizes that resizes everything, with its own range for Easy Mode (on Mac, text size follows System Settings › Displays). Both have a “Reset to default” row.
• Two-factor codes built inStandard TOTP (RFC 6238), generated on device. Scan the QR code, import a screenshot, paste an otpauth:// link, or move your whole Google Authenticator library across in one batch. Link a code to an account and it shows up right on the row. A Home Screen and Lock Screen widget shows your pinned codes — with a privacy mode that shows names only until you tap.
• A security grade from A to J, checked offlineFive things cost points — passwords found in a public leak (up to 40, checked against a million leaked passwords bundled in the app), weak ones (20), reused ones (20), long unchanged (10), and no two-step verification where the site supports it (10). Each is scored in proportion to how many entries it affects, so fixing a handful always moves the number; accounts you sign in to with a passkey are never penalised. The number becomes a grade from A to J — a letter is easier to remember than “73” — with a month-by-month trend line, a one-tap check-up with eight badges, and a PDF report you can export. Every item says “Checked on this device · no internet”. How it works.
• Passkeys, cards and identities — on deviceCreate passkeys for websites and apps and sign in with Face ID; the private key never leaves this device and travels only inside encrypted backups. Store bank cards (camera scan, expiry warnings) and identities with several emails, phones, addresses and documents, and fill any field from the keyboard — number, expiry, security code, name, address, ID number. Passkeys explained · Filling from the keyboard.
• Leaving a site? The exit is markedAn account deletion guide covering 2,100+ websites: where the delete button hides, how hard it is, instructions in your language, a link to the site's own page and ready-made GDPR / CCPA request letters. Each account shows “How to delete this account” when the site is known. 8PWD shows the way; it never deletes anything for you. Browse the guide.
• Members: whose password is thisOne person managing a family’s passwords creates a member for each — Me, Sam, Mum. Switch to a member and the list, groups and grade show only theirs; “All accounts” shows everything. Members have no passwords and no login; they are local labels. When a child gets their own phone, export just their share and hand it over.
• Search that understands youSearch matches account names and every field, ignores accents and full-width characters, and understands Pinyin — full or initials — for Chinese names. Account names (never secrets) can also be found from Spotlight, and Home Screen quick actions jump straight to a new password, a 2FA scan or search.
• Wi-Fi passwords with QR codesHome, office and family Wi-Fi live in their own module, each with a standard QR code: hand your phone to a guest, they scan, they’re online — nobody reads a password aloud. Scan the code on a router to save it. Wi-Fi networks don’t count towards the free limit.
• Groups that keep themselvesFolders and subfolders you arrange, plus smart groups that are really live queries: weak, reused, long unchanged, empty, and exact duplicates. The duplicates group has a keep one of each button that tells you what it will remove before it does it.
• Backups you actually ownExport a .8pwd file — plain by default, or encrypted with a backup password when you switch Encrypt this backup on. A plain export is XML underneath, so your data is never locked inside this app. Scheduled local backups run daily, weekly, monthly or on an interval you set, and a local reminder nudges you when nothing has been exported for 30 days.
• Free for ten. Pay once for the rest.The free plan keeps every feature and stores up to 10 passwords. 8PWD 2026 Pro lifts the limit. Lifetime is a single purchase — nothing to renew, Family Sharing with up to six family members, one purchase for iPhone, iPad and Mac. Prefer to subscribe? Yearly comes with a 7-day free trial and Family Sharing too; Monthly is there as well. Prices are whatever your App Store shows. If a subscription ends nothing is deleted: above the limit the vault simply becomes read-only, and viewing, searching, copying and AutoFill keep working.
• Careful with the clipboardA copied password clears itself after 30 seconds and never travels to your other Apple devices through Universal Clipboard. That is not a setting you can weaken; it is how copying works here.