Product

PassStash is a zero-knowledge password manager: shared crypto cores in C# and TypeScript, an ASP.NET sync region, and clients that encrypt before anything leaves the device.

Vault items & sync

Encrypted envelopes sync through a versioned API with conflict-aware clients. SignalR notifies peers when vault ciphertext changes.

Browser extension

Manifest V3 extension work covers autofill, 2FA prompts, breach checks, and device management against the shared TypeScript crypto packages.

Attachments

File attachments are encrypted client-side and stored as opaque objects. The sync region never opens the ciphertext.

Account recovery

Recovery and rekey flows are protocol-shaped so a forgotten master password does not require trusting the server with plaintext vault data.

Availability roadmap

The AU sync region is online. The browser extension continues to land features; desktop and mobile MAUI clients are next once toolchains are installed on build machines.

Public downloads will appear here when those clients are signed and ready. Until then, access is coordinated through Trucell.