How can we help?
Start with the common questions below. If yours is not there, send us a message — we read every one.
What exactly is encrypted?
Passwords, notes, password history and generated passwords are encrypted with AES-256-GCM. Personal documents and their photos are encrypted with AES-256-GCM under a separate key. Both keys are kept in your device’s secure storage — the iOS Keychain or the Android Keystore.
Titles, usernames, website addresses, categories and settings are stored without encryption so you can search them. Everything stays on your device either way.
How do backups work?
When you export a backup, One Pass encrypts the file with AES-256-GCM using a password you choose (the key is derived from it with PBKDF2). The file is saved or shared wherever you choose; we never receive it.
To restore, import the file into One Pass and enter the same backup password.
I forgot my backup password. Can you recover it?
No. Only someone who knows the password can open the backup, and that includes us — we cannot recover a forgotten backup password, and without it the backup cannot be opened.
If you can still open One Pass on your phone, export a fresh backup with a new password you will remember, and keep it somewhere safe.
How does iCloud sync work?
iCloud sync is optional and available on iOS only. When you turn it on, an encrypted copy of your vault is saved in your own iCloud Drive. It is encrypted with AES-256-GCM using a key kept in your iCloud Keychain, so it lives in your iCloud account, not with us — we cannot read it. You can turn sync off at any time.
On Android, use password-protected backup files to move or keep a copy of your vault.
I forgot my app passcode. What can I do?
One Pass has no account and no servers, so there is no “reset by email” — we cannot recover a forgotten passcode. Choose a passcode you will remember and keep it private.
A recent backup, protected by a password you know, is your safety net if you ever lose access to the app.
Does One Pass need the internet?
No. Your vault works without an internet connection. The app only goes online to show website icons next to saved logins (only the website’s address, such as github.com, is sent to Google’s icon service), to load ads from Google AdMob in the free version, and when you choose to send a support, bug-report or rating form.
Is One Pass free?
Yes. One Pass is free and shows ads from Google AdMob. There are no in-app purchases.
When can I download it?
One Pass is coming soon to the App Store and Google Play. This page will link to both stores as soon as the app is live.
Send us a message
Found a bug, stuck on a backup, or have an idea? Tell us below — it goes to the same place as the support form inside the app.