- Home
- Password Managers
- PassWeb
On the recordRead 8 Oct 202619 facts
PassWeb
On the record
- Account recovery limit
- The README says forgetting the master password means the encrypted data is irretrievably lost because there are no backdoors or secondary passwords.github.com · read 8 Oct 2026
- Account setup
- The README says users must contact the administrator to request an account, which is created with a temporary password.github.com · read 8 Oct 2026
- Browser support
- The README says PassWeb works on modern browsers, including recent Internet Explorer, Chrome, Firefox, and Safari releases.github.com · read 8 Oct 2026
- Client-side privacy
- The README says data is decrypted only on the client and unencrypted data never leaves the machine.github.com · read 8 Oct 2026
- Encryption
- The account data file is encrypted with 256-bit AES in CBC mode, and the README says the encryption key uses PBKDF2 with SHA-512 and 1,000 iterations.github.com · read 8 Oct 2026
- Hosting
- The client can be hosted on any web server or file server, and the storage API has ASP.NET and Node.js implementations.github.com · read 8 Oct 2026
- Intended use
- The author says PassWeb was intended to be safe for normal use in low-risk environments and advises users to evaluate it for their own needs and risks.github.com · read 8 Oct 2026
- Local encryption
- Account data is decrypted only on the client; the server does not see the username, password, or unencrypted data.github.com · read 8 Oct 2026
- Offline use
- Users can cache encrypted passwords for offline access, and changes synchronize with the server when PassWeb is used online.github.com · read 8 Oct 2026
- Password tools
- Users can generate random complex passwords, copy or select stored names and passwords, and keep additional information in notes.github.com · read 8 Oct 2026
- Purpose
- PassWeb is an online/offline web application for securely managing passwords.github.com · read 8 Oct 2026
- Recovery limit
- The README says forgotten master-password data is irretrievably lost because there are no backdoors or secondary passwords.github.com · read 8 Oct 2026
- Security guidance
- The author recommends HTTPS for both the storage API and client files, and warns users to avoid entering their master password on untrusted devices.github.com · read 8 Oct 2026
- Server implementations
- The storage REST API implementations are provided for ASP.NET and Node.js.github.com · read 8 Oct 2026
- Session protection
- PassWeb logs users out after three minutes of inactivity and re-masks revealed names and passwords after ten seconds.github.com · read 8 Oct 2026
- Storage
- It stores encrypted password data in the cloud so it can be accessed from anywhere.github.com · read 8 Oct 2026
- Storage options
- The Node.js implementation supports storing data as blobs in Microsoft Azure.github.com · read 8 Oct 2026
- Support
- The author asks users to report problems and says browser issues should be emailed with detailed reproduction steps.github.com · read 8 Oct 2026
