AES-256-GCM Encryption
Military-grade standard. Keys derived with memory-hard Argon2id from your master password.
The Most Secure Password Manager.
No Subscription.
Local AES-256 encryption. No cloud. Pay once, yours forever.
GitHub
Amazon
••••••••••••
Google
Outlook
/ Core Features
Built for privacy, not data profit.
HIBP Breach Check
Checks passwords against breach databases. Uses k-anonymity so your password is never sent.
TOTP / 2FA
Store two-factor codes. Auto-fill 6-digit codes in one tap.
100% Offline
No servers. No telemetry. Airplane mode? Works perfectly.
Encrypted Export
Encrypted backup file, portable anywhere. Yours alone.
Secret Lock (Hide for a While)
Temporarily hide sensitive items. Out of sight, still encrypted.
/ Free vs Premium
Free forever. Upgrade for the power tools.
FeatureFreePremium
Store passwords locally✓✓
AES-256-GCM encryption✓✓
HIBP breach check✓✓
TOTP / 2FA storage✓✓
Password Expiry Reminder✓✓
Secret Lock (Hide for a While)✓✓
Vault Health Score—✓
Encrypted Export✓✓
Advanced Generator (Bulk)—✓
Custom Fields—✓
Tags & Advanced Filter—✓
Encrypted Share Link—✓
PriceFree$9.99
/ One-Time Payment
Pay once. Never subscribe again.
Lifetime · One-Time Payment
$9.99USD
was$19.99one-time only
- ✓All Premium features, forever
- ✓Vault Health Score & duplicate audit
- ✓Custom Fields, Tags & Share Link
- ✓Free updates, forever
- ✓Priority email support
30-day money-back guarantee · No questions asked · One-time payment
/ Questions
Frequently asked.
Where is my data stored?
All password data is encrypted with AES-256-GCM and stored only on your device. The encryption key is derived from your master password with Argon2id, a memory-hard key derivation function. Without your master password, not even we can open your vault. Zero-knowledge by design.
What is One-Time Payment?
You pay $9.99 once and get all Premium features forever, including free updates for the next version. No monthly bills, no auto-renew. The opposite of every other password manager.
Can I use it offline?
Yes. Hesych runs 100% locally on your device. No internet needed to open your vault, generate passwords, or autofill forms. Your data never touches a server.
What happens if I forget my master password?
Your vault is encrypted with a key derived entirely from your master password. We have zero access to it. If you forget your master password, your vault cannot be recovered. No backdoor means no one can unlock it for you. We strongly recommend writing your master password down and storing it somewhere physically secure.
How is Hesych different from Bitwarden?
Bitwarden is a great product, but it's cloud-native. Your encrypted vault lives on their servers and syncs through them. Hesych is local-first: your data never leaves your device. On pricing: Bitwarden Premium is $1.65/month ($19.80/year). Hesych is $9.99, once, forever.