https://tducray.fr/mypwdtool/ Recent content in MyPwdTool on TDucray #137 Hugo en-us https://tducray.fr/mypwdtool/security/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/security/ The short version Every piece of sensitive data in your vault — passwords, card numbers, notes, two-factor secrets, passkey metadata — is encrypted on your device, with a key that is itself derived from your master password on your device. MyPwdTool never transmits your master password anywhere, never transmits your encryption keys anywhere, and stores nothing in a form that could be read without them. If you forget your master password, nobody can recover your vault for you — not the developer, not a support team, nobody. https://tducray.fr/mypwdtool/open-source/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/open-source/ Why not the whole app? Publishing the entire application as open source would make it trivial to take the compiled app, strip out the parts that make sync sustainable to run (see Subscription & Pricing), and redistribute copies that never contribute anything toward keeping the relay online. The rest of the app — the UI, the browser extensions, the AutoFill integration — stays proprietary for that reason. Why open the sync and encryption code specifically? https://tducray.fr/mypwdtool/vaults-backups/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/vaults-backups/ What a vault is A vault is a single encrypted file on your device, holding all your entries — logins, cards, notes, TOTP secrets, and passkey metadata. It has its own master password and its own encryption keys, entirely independent of any other vault. See Security & Encryption for exactly how it’s protected. Multiple vaults On macOS and iOS, you can create more than one vault — for example, to keep a personal vault fully separate from a work vault, each with its own master password. https://tducray.fr/mypwdtool/synchronization/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/synchronization/ The feature: same passwords vault on many devices You have hundreds of passwords and multiple Macbook, iPhone, iPad, PC? Activate device synchronization. All your passwords on all your devices, with full security. The model: a blind relay, not a cloud database Most password managers sync by uploading your (encrypted) vault to a company’s cloud database. MyPwdTool works differently: there is no central database of vaults at all. Instead, your devices talk directly to each other through a small relay server whose only job is to pass encrypted messages along — it has no concept of a “vault,” a “password,” or even a “user account. https://tducray.fr/mypwdtool/subscription/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/subscription/ Everything except multi-device sync is free The vault, browser autofill (Safari and Chrome), the AutoFill Credential Provider on iOS/macOS, password health checks, breach checks, TOTP codes, passkey metadata storage, and encrypted backups all work fully offline and cost nothing, with no feature limits and no time limit. What the subscription is A yearly subscription ($2.99/y) that unlocks multi-device synchronization: creating a new sync group, and inviting further devices into one you already created. https://tducray.fr/mypwdtool/password-health/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/password-health/ Password Health Audit MyPwdTool scans your vault, entirely on-device, to flag: Weak passwords — short, low-entropy, or easily guessable Reused passwords — the same password used across more than one entry Old passwords — entries that haven’t been changed in a long time None of this requires any network call at all. Your passwords never leave your device for this check. Breach check (Have I Been Pwned) MyPwdTool can check whether a password appears in a known public data breach, using the Have I Been Pwned API. https://tducray.fr/mypwdtool/windows/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/windows/ What it is MyPwdTool for Windows is a native desktop app built on the same encryption and sync engine as the macOS and iOS apps — the exact same key derivation, per-field AES-256-GCM encryption, and sync protocol described in Security & Encryption and Synchronization apply identically here. What differs is scope and platform integration, listed exhaustively below. Current limitations (v1) Single vault only. The macOS/iOS multi-vault feature (see Local Vaults & Backups) isn’t available yet on Windows. https://tducray.fr/mypwdtool/privacy/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/privacy/ Last updated: 7 August 2026. Summary MyPwdTool is built so that there is as little of your data to protect, collect, or lose as possible. There is no MyPwdTool account, no analytics, no advertising, and no tracking of any kind. The sections below describe, precisely, everything the app does send over a network, and why. Data stored on your device Your vault — passwords, usernames, notes, card details, TOTP secrets, passkey metadata, and the local activity log — is stored only in an encrypted file on your own device. https://tducray.fr/mypwdtool/faq/ Mon, 01 Jan 0001 00:00:00 +0000 https://tducray.fr/mypwdtool/faq/ Is MyPwdTool free? Yes, entirely, except multi-device sync — see Subscription & Pricing. Can MyPwdTool read my passwords? No. Encryption and decryption happen only on your own device, using a key derived from your master password, which is never sent anywhere — see Security & Encryption. What happens if I forget my master password? Your vault cannot be recovered by anyone, including MyPwdTool — see Security & Encryption and, importantly, Local Vaults & Backups for how to protect yourself against this before it happens.