Features
Keys, wallet, and a watch on the lot
Keys Wallet & Watch keeps the passwords you use every day, the details you need now and then, and an eye on how safe they all are. Every feature on this page is in the app today.
What can Keys Wallet & Watch store?
Logins with their two-factor codes, backup codes, and notes for anything else: card and ID details, Wi-Fi keys, alarm codes, instructions. Key files hold keystores, certificates and private keys. Every entry can carry extra fields and notes, be filed under an account and an owner, and be starred as a favorite. With Developer Mode on it also stores API keys, SSH keys, database logins, certificates and .env files.
Keys
Every login, with its two-factor code beside it
Search the whole vault from one box and copy what you need in a click.
Logins
Username, password, web address, notes and any custom fields you add. Mark a custom field sensitive and it's hidden like a password.
Two-factor codes
Paste the setup key a site gives you when you turn on two-factor sign-in, and the login shows the live 6-digit code with a countdown, ready to copy. No separate phone app needed.
Backup codes
A place for the one-time recovery codes sites give you when you turn on two-factor sign-in, so you can still get in if you lose your phone.
Password generator
8 to 128 characters from upper case, lower case, digits and symbols, with an option to leave out look-alikes such as 0 and O. A strength meter rates every password as you type.
Clipboard that cleans up
Copied passwords are cleared from the clipboard after 30 seconds by default (10 seconds to 2 minutes), and only if you haven't copied something else since. Copied passwords are kept out of Windows clipboard history.
Recycle Bin
Deleting an entry moves it to the Recycle Bin, where it waits 30 days before it is gone for good. Restore it from there, or delete it permanently if you'd rather not wait.
Password history
When a password changes, the old one is saved inside the entry (the last 10), including the losing side of a sync conflict. A screen for browsing them isn't in the app yet.
Wallet
Cards, IDs and the things you keep having to look up
Not everything is a login. Notes hold card details, ID numbers, Wi-Fi keys, alarm codes and instructions, all inside the same encrypted file.
Notes
A Note entry is for anything that isn't a login: card numbers, passport details, insurance policies, the gate code.
Accounts
One account per company or service, holding all of its credentials, so the bank's website login, app PIN and card notes sit together.
Owners
File each entry under a person or a company. The Owners list answers "whose is this?" for a family, a small office or a client list.
Key files
Keep a keystore, certificate or private key file (.jks, .p12, .pfx, .pem, .cer, SSH keys and more, up to 1 MB) encrypted in the vault, with its store password, alias and key password. The app reads the certificate's expiry date, and Save file writes the file out again when you need it.
Favorites
Star what you use every day and it's one click away.
Several vaults
Keep separate vaults on one PC, for example a personal one and a business one, each with its own master password.
Starts simple
A short setup wizard creates a vault with recommended security settings. Extras such as Owners and Developer Mode switch on only when you want them.
Watch
A security dashboard that tells you what to fix first
One health score for your logins, with the entries behind every warning a click away.
Weak passwords
Every login gets a strength rating, and anything easy to guess is listed so you know what to change first.
Reused passwords
Logins that share a password are grouped, so you can see exactly which ones to change.
Old passwords
Passwords you haven't changed in a while (90 days by default, and you choose) are flagged.
Breach check
Finds passwords that have turned up in known data breaches, using Have I Been Pwned's public list, without sending your passwords anywhere. The app reminds you to check again every 3 months.
Expiry warnings
Give an API key or certificate an expiry date (a key file's is read for you) and the dashboard warns you 30 days ahead.
Health score
Starts at 100 and drops for each weak, reused, old or expired item, so progress is visible as you fix things.
Moving in
Bring your passwords with you
Switching takes minutes, not an afternoon of copy and paste.
- Straight from your browser: Keys Wallet & Watch finds the passwords saved in Chrome, Edge, Brave, Opera and Firefox on the same PC (every profile) and lets you pick which to bring in. A Firefox profile with a primary password asks for it once.
- From another password manager: export files from Chrome, Bitwarden, LastPass and 1Password are recognised automatically. Two-factor codes come across from Bitwarden too.
- From a spreadsheet: save it as a CSV file and match up the columns on screen, including a column for the person or company each login belongs to. Or start from our template (also in Settings → CSV Import): fill in the project, account and type columns and every row is filed under the right client, service and kind of entry.
- Then clean up: after a browser import, step-by-step directions show how to delete the copies the browser kept.
Getting out is just as easy
Your data is never locked in. Export everything to a spreadsheet file at any time (the app asks for your master password again and warns you that the file isn't locked), or keep a copy of the locked vault itself as your backup.
For a small business
Your clients' passwords, shared safely with your staff
Group logins by client or department into projects, then share just the projects each person needs. Nobody sees the rest of your vault.
Projects
Group logins by client, department or product. Projects are for everyone, not just developers.
Share one project
Share a project, not your whole vault, with people who can edit or only view. Before anyone joins, the two of you check a short code by phone.
Take it back
When someone leaves, remove them. The project disappears from their PC the next time their app goes online, and they get nothing new.
Undo mistakes
Entries deleted from a shared project wait 30 days in a trash every member can see and restore from.
Sharing works through sync; the Sync Family and Sync Team plans cover the people you share with. How sharing works →
Developer Mode
A proper home for API keys and .env files
Turn on Developer Mode in Settings and the vault grows the tools developers need. Leave it off and none of it gets in the way.
Developer entry types
API Key, Secret, Environment Variables, SSH Key, Database and Certificate, each with the right fields.
Projects and environments
Nest projects if you like, and tag each secret with its environment, such as production or staging.
.env in and out
Paste a .env file to create entries; export one per entry or per project and environment.
Expiry dates
Set when a key or certificate expires and the security dashboard warns you in time.
Everyday safety
Protection that's on before you think about it
Auto-lock
Locks after 5 minutes idle by default (1 to 30 minutes, or never).
Screen-capture protection
On by default, so screenshots and screen recordings show a blank window.
Remote-access lock
The vault locks and the clipboard clears if someone connects to the PC remotely.
Recovery key sheet
Print your recovery key on a sheet with storage tips, so a forgotten password isn't the end.
Backups
Save a copy of the locked vault anywhere you like, and the app reminds you when one is due. A restored backup opens as a separate vault, so it never overwrites what you have.
Slow to guess
Wrong master passwords add a growing delay, up to a minute between tries.
Works offline
Nothing needs the internet except sync, breach checks and licensing.
Nothing sent about you
The app sends no analytics or usage data. Ever.
Not in the app (yet)
What you won't find
So you can decide with the full picture:
- No Mac, Linux, iPhone or Android version. Windows 10 and 11 only; a phone app is planned with no date.
- Browser autofill only in Microsoft Edge so far. The Chrome and Firefox extensions are coming; until then you copy and paste.
- No passkey storage and no QR-code scanning for two-factor secrets.
- No light theme in the app; it's dark only.
Guides for every feature are in the Keys Wallet & Watch how-to guides (opens in a new tab).
Try every feature free for 30 days
Try every feature free for 30 days. If you keep it, it's $24.99 once for up to 5 PCs.