Keep everything encrypted, under your control, and share safely when you need to.
Designed with a zero‑knowledge model and modern cryptography. Your secrets stay yours.
Every field is encrypted—category, description, username, email, password, URL, and comments—using keys secured by your Master Password.
Your data stays private. We can’t read your passwords. Decryption happens only on your device.
Share passwords with other HashThat users using encrypted channels with per‑recipient keys and revocable access.
Control what others can do: allow or block edits and prevent re‑sharing by default.
Set start and end dates for shared access. Great for contractors or time‑boxed collaboration.
See change history and view logs for each item, including timestamps and actors.
Invite trusted people to access a password without exposing anything else. Set what they can do and for how long.
View
Recipient can view the secret on supported devices.
Edit
Allow edits to username, password, notes, and metadata.
Reshare
Permit recipient to share with others you approve (off by default).
Valid From / Until
Define start and expiry for shared access.
Revoke
Instantly remove access for any recipient at any time.
Keep a full record of password edits and viewing activity. Spot unusual access patterns and roll back changes if needed (Pro).
Yes. All password fields are encrypted using keys that only you control. We never see your raw passwords.
It means we cannot decrypt your data on our servers. Decryption happens only on your devices using your keys.
Yes. You decide if they can view, edit, or re‑share, and you can set start/end dates or revoke at any time.
Yes. You can see a timeline of edits and viewing activity per item. Export is available on Pro.
Start free. Upgrade anytime. Your data stays encrypted and under your control.