Windows
Windows 10 and 11 · .exe installer
Passwords, API keys, .p8 certificates and .env files, encrypted on your device with Argon2id and AES-256-GCM. Our servers only ever hold ciphertext.
Every item is encrypted before it syncs. This is the path a single API key takes.
Argon2id derives it in memory, on this device. Your master password is never sent anywhere.
Each item gets authenticated encryption. Any tampering with the ciphertext is detected and rejected.
Sync only ever receives ciphertext. Neither we nor anyone who breaches us can read it.
Authsidian also protects what isn’t a password: API keys, certificates and the files that pile up in your Downloads folder.
Watches your Downloads folder in the background and catches .p8, .pem, certificates or .env files before they leak. One click encrypts them into your vault and shreds the original.
Other managers are great at storing passwords. Authsidian also guards the secrets that aren’t.
Based on each product’s public documentation as of October 2026. Third-party features may change.
The local vault is free and unlimited, with no account. Pro adds sync and encrypted storage from $2.42 a month, billed yearly.
See pricingWindows 10 and 11 · .exe installer
Universal .dmg, Apple Silicon and Intel
iOS with Face ID and autofill
Extension with card autofill