Skip to content
OnePass

Your passwords, encrypted for the quantum era.

OnePass keeps your passwords, passkeys, cards and documents on iPhone, iPad, Mac, Apple Watch and Vision Pro. Its keys are wrapped with post-quantum encryption, and the storage that syncs them only ever holds ciphertext. It's free and the code is open.

Star on GitHubHow it's secured
  • Free
  • AGPL-3.0
  • Post-quantum
  • 5 Apple platforms

OnePass is pre-release software (v0.2). It hasn't had its external security audit yet, so please don't keep real secrets in it until the first audited release.

A login in OnePass, with its password strength and a live one-time code.A login in OnePass, with its password strength and a live one-time code.

iPhone, iPad, Mac, Apple Watch, Vision Pro and a browser extension

Everything you sign in with, in one place.

A native app on every Apple device, with one Rust core underneath that does all the crypto.

  • Your vaults

    26 item types, from logins and cards to passports, SSH keys and crypto wallets. Several vaults, favorites and fast search.

    OnePass's Home screen, with item counts, Watchtower and favorites.OnePass's Home screen, with item counts, Watchtower and favorites.

  • Codes and passkeys

    A login holds its password, its one-time code and its passkey. Passkeys are made and used inside the Rust core, and the private key never reaches the app's Swift code.

    A login in OnePass, with its password strength and a live one-time code.A login in OnePass, with its password strength and a live one-time code.

  • Two secrets to unlock

    Your key comes from your master password and a 256-bit Secret Key made on your device. A copy of the sync data is no use to anyone without both.

    OnePass's welcome screen, with Create Vault and I Have My Emergency Kit.OnePass's welcome screen, with Create Vault and I Have My Emergency Kit.

Native on iPad and Mac.

One SwiftUI app for iPhone, iPad, Mac and Vision Pro. Three columns on iPad, and a real Mac app that isn't a ported iPad one.

OnePass on iPad: the sidebar, the item list and an item open beside them.OnePass on iPad: the sidebar, the item list and an item open beside them.OnePass on the Mac, on its first screen.OnePass on the Mac, on its first screen.

Screenshots show fictional demo data.

Security model

Built as if the server were hostile.

Every vault carries a signed, hash-chained manifest. If a broken or malicious sync backend rolls back, forks, drops or swaps an item, the app knows before it uses anything.

The key hierarchy
  1. Master passwordyou remember it
    Secret Keymade on your device
  2. Account Unlock KeyArgon2id, then HKDF
  3. Keysetsealed by that key
  4. Vault keysone per vault
  5. Item keysone per item

  • Post-quantum from day one

    Vault keys are wrapped with ML-KEM-1024 and X25519 together. Manifests and backups are signed with ML-DSA-87 and Ed25519, and both signatures have to check out. Your account identity is an SLH-DSA key.

  • Sync over your own iCloud

    End-to-end encrypted sync over CloudKit, in your private iCloud database. Apple's own encryption is a bonus. The threat model assumes it fails, so storage only ever sees padded ciphertext.

  • Every known attack is a test

    Each attack class from the 2026 ETH Zurich and USI study of cloud password managers is replayed by a hostile server test suite in the repository.

  • An Emergency Kit on paper

    A PDF with your Secret Key and a QR code, made on your device, so a new phone can get back in.

Read the whitepaper and threat model

And there's more.

The rest of what's in v0.2.

  • AutoFill

    System AutoFill on iPhone, iPad and Mac, with QuickType suggestions and one-time codes filled into verification fields. It saves new passwords and suggests strong ones on iOS 26.2 and later.

  • Browser extension

    For Chromium browsers, Firefox and Safari. It pairs with the app by a 6-digit code you compare on both screens, talks to it over a post-quantum encrypted channel and only fills HTTPS pages.

  • Watchtower

    Weak, reused and old passwords, breached sites, and sites where you could turn on 2FA or passkeys. Leaked passwords are checked with Have I Been Pwned's k-anonymity, so only a 5-character hash prefix leaves the device.

  • Apple Watch and widgets

    A standalone, read-only Watch app for your codes, with complications. It holds at most 50 items and never login passwords, card codes, PINs or notes. Widgets, Controls and Shortcuts on iPhone.

  • In a terminal

    A CLI, an SSH agent that asks before every signature, and an MCP server so an AI agent can use a credential without ever seeing it. Each request waits for your approval and goes into a signed audit log.

  • Import and export

    21 formats in, from 1Password, Bitwarden, LastPass, Dashlane, Proton Pass, KeePass, the browsers and FIDO's Credential Exchange. Export goes to a signed, encrypted archive.

  • Travel Mode

    Take vaults off a device before you cross a border, and bring them back after.

  • Generator

    Strong passwords and passphrases from the EFF word lists.

Made to be checked.

The tests are in the repository, next to the code they check.

fuzz targets, run in CI on every push
19
leaks in the first 200-site autofill lab run, with a 63.8% fill rate
0
post-quantum algorithms checked against NIST's ACVP vectors
3

  • Two crypto libraries

    aws-lc-rs runs against libcrux in differential tests, with property tests on the AEAD.

  • Formal models

    ProVerif models of account creation and unlock, vault manifests, the Emergency Kit and the extension bridge, including runs where one half of each hybrid KEM is broken.

  • An autofill lab

    Hundreds of seeded, fictional websites served locally, to measure how often the extension fills a form and whether anything ends up where it shouldn't.

Read the lab report

What OnePass isn't yet.

We'd rather you know before you build it.

  • No external audit yet

    One is planned before the first stable release. Until then, please don't store real secrets in OnePass.

  • You build it yourself

    To try it today you build it from the repository. The dev CLI and the dev native messaging host keep secrets in a form meant for development only.

  • iCloud sync only

    A self-hosted server is planned after v1. Sync on real iCloud, across two devices, still has to be checked by hand.

  • Safari in Debug builds

    The Safari extension ships inside the Mac app, in Debug builds only until the app serves the bridge.

  • Not built yet

    Sharing, organizations, a web app and recovery codes are on the roadmap for later.

  • What it can't defend

    A device taken over at the OS level, or an attacker who can read the app's memory. Secrets are zeroized, and memory locking isn't in yet.

Build it

Clone it and run it.

The Rust core needs Rust 1.99.1, the apps need Xcode 27 and XcodeGen, and the extension needs Node 22. The apps target iOS 26, iPadOS 26, macOS 26, watchOS 26 and visionOS 26 or later.

CloudKit sync is only compiled into the signed Release-CloudKit configuration, which needs your own Apple Developer team and iCloud container.

License

Free software under the AGPL.

OnePass is licensed under the GNU Affero General Public License v3.0 or later. For a commercial license without the AGPL terms, write to security@somalabs.me with License in the subject.

Found a vulnerability?

Please report it privately through GitHub Security Advisories or to security@somalabs.me, never in a public issue. Reports are acknowledged within 72 hours.

Report privately

Reviews welcome.

Contributions are welcome, and reviews of the crypto and the threat model most of all.

Star on GitHub

Contributors sign a contributor license agreement once, before their first pull request is merged.