PWDnow
The facts below are what the maker publishes about PWDnow, checked and dated. Our editors have not written about it yet.
The facts
Each one read from PWDnow's own pages, with the date it was checked.
What it does
- Authentication
- It supports WebAuthn and FIDO2 hardware keys and platform authenticators, TOTP and HOTP, passkeys, and configurable per-account MFA enforcement.checked 12 Oct 2026
- Breach checks
- PWDnow checks passwords against a local Have I Been Pwned corpus filter, without a network lookup for each password.checked 12 Oct 2026
- Credential storage
- Credentials can include passwords, TOTP secrets, notes, and custom fields, organized in folders.checked 12 Oct 2026
- Credential tools
- Credentials can be organized into folders and include passwords, TOTP secrets, notes, and custom fields; the app also scores password strength and detects reuse and common passwords.checked 12 Oct 2026
- Cryptography
- The project describes hybrid X25519 and ML-KEM key encapsulation enabled by default, ML-DSA signatures, Argon2id key derivation, and AES-256-GCM and XChaCha20-Poly1305 encryption.checked 12 Oct 2026
- Data protection
- The project says vault data is stored in an SQLCipher-encrypted database and that master and derived keys remain in the daemon rather than the browser layer.checked 12 Oct 2026
- Deployment
- PWDnow can run offline on one machine or be deployed behind Nginx with TLS for LAN or self-hosted server access.checked 12 Oct 2026
- Imports and exports
- PWDnow imports Bitwarden, 1Password, and NordPass exports, and supports JSON, CSV, KeePass-compatible XML, and its encrypted .p2w export format.checked 12 Oct 2026
- Install requirements
- Building from source requires Node.js 24 or newer, Rust 1.94 or newer, protoc, and development headers for libsodium, SQLCipher, and libfido2.checked 12 Oct 2026
- License and pricing
- The repository identifies the project as MIT-licensed and does not state a product price or subscription plan.checked 12 Oct 2026
- Local-first design
- The project says cryptographic operations run in a Rust daemon on the machine where the vault lives, while the web interface forwards encrypted requests and does not hold key material.checked 12 Oct 2026
- Offline use
- It can run offline on one machine, with no cloud sync by default and no telemetry.checked 12 Oct 2026
- Optional strict mode
- An optional CNSA 2.0 strict mode restricts the daemon to the algorithms listed in the README for that mode.checked 12 Oct 2026
- Passkey support
- Yeschecked 16 Sep 2026
- Password checks
- It scores password strength, detects reuse and common passwords, and checks breaches against a local Have I Been Pwned corpus filter without a per-lookup network call.checked 12 Oct 2026
- Passwordless account login
- Yeschecked 16 Sep 2026
- Product
- PWDnow is a zero-knowledge, local-first password manager.checked 12 Oct 2026
- Purpose
- PWDnow is a zero-knowledge, local-first password manager whose Rust daemon handles cryptography while the web interface exchanges encrypted data with it.checked 12 Oct 2026
- Security modes
- Features include duress mode, travel mode, lockout backoff after failed unlock attempts, and time-delayed emergency access for a trusted contact.checked 12 Oct 2026
- Security reporting
- The project asks vulnerability reporters to use GitHub private vulnerability reporting or contact the maintainers directly instead of opening a public issue.checked 12 Oct 2026
- Security reports
- The project asks users to report vulnerabilities through GitHub's private vulnerability reporting or directly to maintainers, rather than through a public issue.checked 12 Oct 2026
- Supported systems
- The project says it is developed and tested primarily on Ubuntu 26.04 LTS, and its installer also supports Debian-derived and Fedora or RHEL-family distributions; it has no macOS or Windows build.checked 12 Oct 2026
- Vault storage
- The vault daemon stores credentials in an encrypted SQLCipher database, and the project says there is no cloud sync by default.checked 12 Oct 2026
Where it runs
- Supported platforms
- Linux,web interface,self-hostedchecked 16 Sep 2026
Alternatives to PWDnow
- 1
Proton Pass
Free planOpen sourceAndroidiOSWebAPI9.4From $35.88 a year - 2
Padloc
Free planOpen sourceAndroidiOSWebExtension9.1From $3.49 a month - 3
NordPass
Free planAndroidiOSWebAPI9.0Free plan - 4
Zoho Vault
Free planAndroidiOSWebAPI8.9Free plan - 5
LogMeOnce
Free planAndroidiOSWebAPI8.8From $2.50 a month - 6
1Password
AndroidiOSWebAPI8.7From $2.99 a month