E2E ENCRYPTED
End-to-end encrypted
Data is encrypted on your device, and only ciphertext is stored in the cloud.
SECURITY, MADE SIMPLE
wljpassmgrEnd-to-End Encrypted Vault
End-to-end encrypted · No ads · Keys stay on your device
End-to-end encrypted No ads Browser autofill
E2E ENCRYPTED PRODUCT
Your vaultencrypted before it ever leaves
wljpassmgr encrypts your data on your device, and only ciphertext ever reaches the cloud. No clutter, no noise — just a clear, quiet security boundary.
End-to-end encrypted Ciphertext in the cloud You stay in control
E2E / ENCRYPTED
WHY MICRO ZERO
A simple interface with a clear security boundary
Security that is professional and quiet. Remember one master password — the vault handles the rest.
AES ENCRYPTION
AES-grade encryption
Everything is encrypted at rest. No plaintext is ever persisted, reducing exposure at the source.
NO DISTRACTION
Clean and ad-free
No pop-ups, no notifications, no silent background reporting — just a tool that does its job.
INSTANT FILL
One-tap filling
Matches saved accounts by domain and fills them in one click, without switching windows.
THE NUMBERS
Five things first before you decide to download
Marketing copy is easy to write. These five things you can verify yourself: where encryption happens, what the free plan gives you, whether your data leaves with you, which devices work today, and whether anything tracks you.
Encryption: AES-256, done on your device
Passwords, secret notes and encrypted images are encrypted the moment you save them. What leaves your device is ciphertext — our servers neither open it nor hold what is needed to open it.
- AES-256 for symmetric encryption, ECIES (secp256k1) for asymmetric, SHA-256 for digests, with keys derived from your master password via PBKDF2.
- Master password and Secret Key are separate: a successful sign-in proves who you are, but it does not unlock the vault.
- Account identifiers, item names and search helper data fall outside end-to-end encryption. The Security page states this boundary type by type.
- Switching devices needs no key export: enter your master password and Secret Key, and the cloud ciphertext is decrypted locally on the new device.
Free plan: 15 entries, 5 devices, no time limit
Free is not a trial: local encryption, cross-device sync and browser autofill stay available indefinitely. The limits are on entry count and device count only.
- Free covers up to 15 entries and 5 signed-in devices. Pro removes both limits.
- Version history is kept 7 days on Free and 90 days on Pro. Encrypted image storage is 100 MB on Free and 1 GB on Pro.
- Pro is ¥8.00/month, ¥18.00/quarter or ¥58.00/year, renewed manually with no automatic charges. After it lapses you cannot add entries, but you can still edit, delete and export.
- The free plan has no expiry date and needs no payment method.
Export formats: your data leaves with you
The worst part of switching tools is discovering you cannot take your data. Our CSV export is a generic format that other password managers read directly.
- Export: generic CSV and the encrypted .wljbak backup package.
- Import: generic CSV, Chrome CSV, Bitwarden CSV, KeePass CSV and 1Password .1pux.
- Importing happens entirely on your device; the file never reaches our servers. The exported CSV is plain text, so delete it once you are done.
Platforms: iOS, Android, web app, Chrome and Firefox extensions
The iOS app is live on the App Store; Android, the web app and both browser extensions are installable too. Windows and Linux desktop installers are built in the release pipeline, and the macOS desktop app has not started — platforms that have not shipped are not described as supported.
- iOS: live on the App Store, using the same account and the same encryption as Android.
- Android: APK installer, downloadable straight from this site.
- Web app: opens in the browser, nothing to install.
- Chrome and Chromium-based browsers, Firefox 115 ESR or newer: browser extension, which provides autofill.
- Windows and Linux desktop installers are built in the release pipeline; the macOS desktop app and a Safari extension are planned.
Privacy: no ads, no third-party analytics
Neither this site nor the apps load third-party analytics, advertising or tracking SDKs, and there is no behavioural profiling. You do not have to take that on trust — open your browser's developer tools and watch the requests.
- No third-party analytics, advertising or tracking SDKs, no behavioural profiling, no retargeting.
- This site sets no tracking cookies; contacts, location and clipboard contents are never collected.
- Only the minimum needed for registration, sign-in, device verification and sync, plus account security notices.
Each item can be checked on this site: algorithms and key boundaries on Security, allowances and prices on Pricing, export and platforms on Features.
HOW IT COMPARES
Against the usual options the difference sits in checkable details
The table below describes the typical behaviour of each category, not a review of any specific brand. Products within a category differ a lot, so judge by what you can verify yourself.
| Browser built-in | Commercial cloud | Open source + self-hosted | wljpassmgr | |
|---|---|---|---|---|
| Where encryption happens | Inside the browser, tied to the OS account | Client-side before upload; most claim zero-knowledge | Client-side; you run the sync server | Encrypted on device before upload; cloud holds ciphertext only |
| Who holds the keys | Bound to the browser and OS account | Depends on whether a recovery secret is required | You hold the config and keys | Master password and Secret Key are split; server holds neither |
| Export and exit | Limited browser export | Usually supported; check whether own-format only | Data files stay with you | Generic CSV, Chrome / Bitwarden / KeePass CSV, 1Password .1pux, .wljbak |
| Free tier | Free with the browser | Usually capped by quota or features | No cap; you pay in servers and upkeep | Free covers 15 entries and 5 devices; Pro is unlimited |
| Platforms | Only the browser you use | Usually mainstream desktop and mobile | Depends on the clients | Android, iOS (App Store), web app, Chrome / Firefox; Windows / Linux desktop in the pipeline |
There are five full criteria, each one verifiable on your own.
Read the five criteriaONE QUIET STEP AT A TIME
Every sign-inmade simpler
Smart form autofill
Detects login forms on the fly and fills in your credentials — no more manual typing.
wljpassmgr
ENCRYPTED01 / 04
Sample login page
Welcome back
Sign in quickly with a saved account
Accounthello@example.com
Password••••••••••••
Filled securely
QUIETLY USEFUL
Beyond securityyour everyday is organized too
Auto-lock, dark mode, categories and bulk cleanup — the vault adapts to the way you work.
Auto-lock
Locks automatically after a while, shrinking the window of exposure.
Dark mode
Stays clear and comfortable in any lighting.
wljpassmgr / Vault Encrypted
Encrypted
Data you control
Categories & tags
Organize your secure space by site, account and tag.
Bulk cleanup
Tidy up old data in one place — every cleanup is confirmed by you.
Secure password generatedu9N!2kR#8xQ@6vL
Strength: High
THE SECURITY PROMISE
Least privilegea password tool you can trust
We request only what features require, never read unrelated pages, never track you, and never hand security to an invisible backend.
Read the security modelSECURITY CHECKPRIVATE / ENCRYPTED
LockedYour secure space
Least privilege
Only the permissions core features need. No extra reads, no behavior tracking.
Transparent compliance
No hidden scripts, no silent network calls, no third-party data sharing.
You own your data
Every piece of data is yours — view, export and clear it at any time.
READY WHEN YOU ARE
End-to-end encryptionfor every single sign-in
Start now — let security feel simple again.
Download wljpassmgr Free to start No ads End-to-end encrypted