Every major cloud password manager has had at least one breach scare in the last 3 years. Some had actual breaches. Encrypted vaults were exfiltrated. Master password hashes were exposed. "Zero knowledge" turned out to have caveats.

I'm a developer. I've seen how these systems work under the hood. The attack surface of a cloud-synced vault is enormous — API endpoints, browser extensions phoning home, session tokens, server-side decryption for "convenience features."

So I built PassSafer. It's a Windows desktop app that stores everything locally with AES-256-CBC encryption and PBKDF2 key derivation. No cloud. No sync. No telemetry. Your vault file never leaves your machine.

The tradeoff is real: you lose cross-device sync. You have to manage your own backups. If you lose your master password, nobody can recover it for you.

But if you're the kind of person who runs your own DNS, uses a hardware key, or just doesn't trust a company to hold your most sensitive data — this is what I built for you.

One-time purchase. No subscription. No account creation. Just a local app that does one thing well.