Cuxtodi home
Join the waitlist

New name ProPass is now Cuxtodi

Your passwords. Only yours.

Cuxtodi is a privacy-first password manager that works offline. Everything is encrypted on your device before it leaves, so not even we can read it.

Join the waitlistHow security works
  • Offline-first
  • Passkeys built in
  • iPhone, Mac and Chrome

Animated demo on an iPhone: a pointer unlocks the Cuxtodi app with Face ID, searches the vault for “qui”, opens the login for Quillnest (a fictional example site) and copies its password. Cuxtodi confirms the domain matches, shows that a passkey is saved for the site, and clears the copied password from the clipboard after 30 seconds.

Built on

  • AES-256-GCM per item
  • Argon2id
  • Offline-first
  • E2E sync on Cloudflare
  • Passkeys
  • Quantum-aware
Features

Serious security, without the hassle.

Designed so your secrets live encrypted on your own devices, and nowhere else in plain text.

  • Two-secret key derivation

    Your master key comes from two secrets: your password and a 128-bit Secret Key that only lives on your devices. One alone is not enough.

    Password + Secret Key

  • Per-item encryption

    Every login, card and note is encrypted separately with AES-256-GCM and its own key, with authenticated integrity on every record.

    AES-256-GCM

  • Works offline

    Your vault lives on your device. Search, copy and autofill on a plane, in the mountains or when the internet goes down.

    Offline-first

  • End-to-end encrypted sync

    Sync across iPhone, Mac and Chrome over Cloudflare’s network. The server only ever sees encrypted blobs, never your data or your keys.

    E2E · Cloudflare

  • Hardened against AI agents

    Autofill needs an explicit action from you, plus auto-lock and domain checks, to reduce the risk of scripts, extensions or automated agents pulling secrets.

    Defense in depth

  • Ready for the quantum era

    256-bit symmetric keys and an architecture prepared to adopt standardized post-quantum cryptography as it matures. Quantum-aware, not “proof against everything”.

    Quantum-aware
Apps

One vault. Every screen.

The same encrypted vault on your Mac and in Chrome, with a login picker that checks the site before it offers anything.

Cuxtodi for Mac: a sidebar with All items, Logins, Passkeys, Cards and Secure notes. The login for Quillnest, a fictional example site, is open, showing the username, a hidden password, a rotating one-time code and a saved passkey.
Cuxtodi for Chrome: on the sign-in page of Quillnest, a fictional example site, the extension confirms the domain and offers a login picker with two saved accounts and a “Sign in with a passkey” option. Nothing is filled until you choose.

  • Mac app

    Native app with Touch ID, quick search shortcut and auto-lock when your Mac sleeps.

  • Chrome extension

    One-click autofill that verifies the domain first, plus strong passwords generated on the spot.

  • Passkeys

    Create and use passkeys alongside your passwords, synced end to end across your devices.

Security

Two keys. One owner: you.

Think of a safe that needs two keys at once. You remember one; your device keeps the other. Steal only one and nothing opens.

  1. Your master password

    Something you know. Processed with Argon2id so guessing it is slow and expensive.

  2. Your Secret Key

    Something you have. Generated at random on your device and never sent to our servers.

  3. Vault key

    Both combine to derive the key that decrypts each item (AES-256-GCM), only on your device.

  4. Blind sync

    Cloudflare carries and stores encrypted data only. Without your two keys, it’s noise.

Simplified illustration of the two-key model. Not a cryptographic specification.

Download

With you on every screen.

One vault, synced and encrypted, on your phone, your Mac and your browser.

  • iPhone and iPad

    Face ID, system autofill and an offline vault on your iPhone and iPad.

    Coming soon

  • macOS

    Native app with Touch ID, quick search and auto-lock on sleep.

    Coming soon

  • Chrome extension

    Fill with one click, domain checked first, and generate strong passwords on the fly.

    Coming soon
Pricing

Simple and transparent.

Start free. Move to Pro whenever you want to sync everything.

  • Free

    $0 forever

    • Unlimited local vault
    • 1 device, 100% offline
    • Password generator
    • Per-item AES-256-GCM encryption
    Join the waitlist: Free

  • Pro

    Recommended

    $2.99 per month

    • Everything in Free
    • Unlimited E2E sync over Cloudflare
    • iPhone, Mac and Chrome
    • Reused-password alerts
    • Emergency kit and encrypted backup
    Join the waitlist: Pro
Early access

Be first to try Cuxtodi.

Leave your email and we’ll write when the beta opens. No spam, and we never share your address.

We’ll only use it for Cuxtodi launch news.

FAQ

Straight answers.

What happened to ProPass?

ProPass is now called Cuxtodi. Same project and the same privacy-first design, under a new name and a new home at cuxtodi.app.

Can Cuxtodi see my passwords?

No. Your vault is encrypted on your device with keys derived from your master password and your Secret Key. Our servers only store and sync encrypted data.

Is Cuxtodi quantum-proof?

No, and be wary of anyone who claims that. Cuxtodi is quantum-aware: it uses 256-bit symmetric keys and is designed to adopt standardized post-quantum cryptography as it matures.

Has Cuxtodi been independently audited?

Not yet. Until an independent audit is published, please treat Cuxtodi as pre-release software and don’t store critical production secrets in it.

What happens if I forget my master password?

Because only you hold the keys, we can’t reset it for you. Your emergency kit, created when you set up your vault, is how you recover access.

Ready to own your passwords?

Join the waitlist and create your vault in under a minute when we open the beta.

Join the waitlistHow security works