Walilock Password Manager
Walilock saves your passwords and fills them in for you, encrypted on your device before they go anywhere. We never see your passwords — not when they sync, not when you sign in.
Your device locks each item before it leaves. We store the locked copy. The key never comes with it.
Readable here, and only here.
3f9c1e…a07dVersion 7 · updated just nowIt can tell an item exists and when it changed. Not what it is, or whose GitHub it is.
Encrypted on your device with XChaCha20-Poly1305 · key from Argon2id · sign-in by OPAQUE
The server never receives your password — not even a hash. OPAQUE performs authentication without exposing your credentials to the relay.
Store, manage, and securely transfer WebAuthn passkeys. Cross-device handoff via the CXP (Credential Exchange Protocol) — import/export in CXF format.
Checks your saved passwords against Have I Been Pwned's list of breached passwords whenever you run a scan. Only the first 5 characters of each password's SHA-1 hash leave your device.
Compares a link against the sites you actually have logins for, on your device, and warns when one is a lookalike. Nothing about where you browse leaves your machine.
Vault data is encrypted locally with XChaCha20-Poly1305 before it ever touches the network. The relay stores your vault contents as ciphertext and never receives your keys.
SSO via OIDC, company vaults with per-collection roles, and an activity log of administrative and item events, with SCIM provisioning from your directory. Employees open the collections they’ve been granted from their own vault. SIEM streaming is on the roadmap.
Paste it into the lookalike link checker. It tells you whether the address imitates a bank, a delivery service or another site people sign in to. It is free, needs no account, and nothing you paste leaves your browser.
The same encrypted vault on your computer, your phone and in your browser.
No credit card required for Personal (free). Trials ask for a card, but you’re not charged until the trial ends.
Personal
10 vault items, local only. Always free.
Personal+
Most popularUnlimited items, cross-device sync, breach alerts.
Family
Everything in Personal+, up to 5 members.
Business
For teams of 5–20. Company vaults, admin controls, activity log.
Enterprise
For regulated orgs. SSO, custom policies, dedicated support.
Choosing for a household? Take the family security check-up →