Post-quantum password manager
Keep every password, passkey, card and note in one vault that is encrypted on your device before anything is saved. Fill them in with a click, and share them with post-quantum encryption built to outlast the computers that will break today’s.
Everything you need
Logins, passkeys, cards, identities, notes and SSH keys, with files attached — and the tools that keep them strong, shared and reachable when you need them.
The browser extension fills in logins, cards and addresses on the sites you visit, and offers to save a new login when you make one.
Save passkeys in your vault and sign in with them on sites that support them — no password to type, nothing to phish.
Random passwords or memorable passphrases, generated on your device. Try the generator without an account.
Share an item with family or a whole team. It is sealed to each person’s own key, with post-quantum encryption, so only they can open it.
Pass a password or a note to anybody with a link that expires after a time or a number of views. The key is in the link, never on our server.
Keep the six-digit codes for your accounts beside the logins they belong to, instead of in a separate app.
See which passwords are weak or reused, and check them against published breaches — only the first five characters of a hash ever leave your device.
Name somebody you trust to reach your vault if you cannot. They get in only after a waiting period you choose, and you can say no until then.
Two-step sign-in with an authenticator app or a hardware security key, a recovery key for the day you forget, and PIN or biometric unlock.
Get started
Choose a master password. It never leaves your device — which is why nobody, us included, can reset it, so keep the recovery key you are given.
Export from the manager you use now and open the file in Mabits. It is read on your device, and you see every item before anything is saved.
Open your vault at mabits.com/vault on any computer, and let the extension fill in your logins as you go.
Built differently
Encrypted data stolen today can be kept until a quantum computer can open it. So every key Mabits seals to another account uses X25519 and ML-KEM-768 together — an attacker has to break both. Your own vault is AES-256, which a quantum computer does not break.
No crypto library, no analytics, not even a font from someone else’s server. The page holding your vault runs under default-src 'none', and a build rule fails if a dependency sneaks in.
The cryptography is checked against NIST’s own test vectors on every build.
It derives a key with Argon2id — m=19 MiB, t=2, p=1 — that never leaves your device. The server stores ciphertext it cannot read, and not even which sites you keep.
Compared honestly
Every password manager says it is the secure one. Here is the comparison as it stands, checked by the build — including the two rows we lose.
| Dimension | Bitwarden | Mabits today |
|---|---|---|
| Asymmetric crypto | RSA-2048 | Hybrid X25519 + ML-KEM-768 |
| Symmetric crypto | AES-256-CBC + HMAC | AES-256-GCM, a single AEAD primitive |
| Password KDF | PBKDF2-600k by default | Argon2id by default |
| Crypto dependencies | Third-party libraries | Zero |
| Client runtime dependencies | A large tree | Zero third-party in the browser |
| Supply-chain policy | Conventional | Enforced in CI, zero marketplace actions |
| Platform coverage | All platforms | Web and a Chromium extension. No mobile client, no CLI — materially worse |
| Audited | Yes, repeatedly | No. Scheduled, not done |
Mabits is in development and not yet audited. A security claim you cannot check is marketing, so this page shows where it falls short as well as where it leads. The full comparison →
Create a vault in your browser in a minute, and bring everything with you in one file.