- Home
- Password Managers
- PWDnow
On the recordRead 12 Oct 202624 facts
PWDnow
On the record
- Authentication
- It supports WebAuthn and FIDO2 hardware keys and platform authenticators, TOTP and HOTP, passkeys, and configurable per-account MFA enforcement.github.com · read 12 Oct 2026
- Breach checks
- PWDnow checks passwords against a local Have I Been Pwned corpus filter, without a network lookup for each password.github.com · read 12 Oct 2026
- Credential storage
- Credentials can include passwords, TOTP secrets, notes, and custom fields, organized in folders.github.com · read 12 Oct 2026
- Credential tools
- Credentials can be organized into folders and include passwords, TOTP secrets, notes, and custom fields; the app also scores password strength and detects reuse and common passwords.github.com · read 12 Oct 2026
- Cryptography
- The project describes hybrid X25519 and ML-KEM key encapsulation enabled by default, ML-DSA signatures, Argon2id key derivation, and AES-256-GCM and XChaCha20-Poly1305 encryption.github.com · read 12 Oct 2026
- Data protection
- The project says vault data is stored in an SQLCipher-encrypted database and that master and derived keys remain in the daemon rather than the browser layer.github.com · read 12 Oct 2026
- Deployment
- PWDnow can run offline on one machine or be deployed behind Nginx with TLS for LAN or self-hosted server access.github.com · read 12 Oct 2026
- Imports and exports
- PWDnow imports Bitwarden, 1Password, and NordPass exports, and supports JSON, CSV, KeePass-compatible XML, and its encrypted .p2w export format.github.com · read 12 Oct 2026
- Install requirements
- Building from source requires Node.js 24 or newer, Rust 1.94 or newer, protoc, and development headers for libsodium, SQLCipher, and libfido2.github.com · read 12 Oct 2026
- License and pricing
- The repository identifies the project as MIT-licensed and does not state a product price or subscription plan.github.com · read 12 Oct 2026
- Local-first design
- The project says cryptographic operations run in a Rust daemon on the machine where the vault lives, while the web interface forwards encrypted requests and does not hold key material.github.com · read 12 Oct 2026
- Offline use
- It can run offline on one machine, with no cloud sync by default and no telemetry.github.com · read 12 Oct 2026
- Optional strict mode
- An optional CNSA 2.0 strict mode restricts the daemon to the algorithms listed in the README for that mode.github.com · read 12 Oct 2026
- Passkey support
- Yesgithub.com · read 16 Sep 2026
- Password checks
- It scores password strength, detects reuse and common passwords, and checks breaches against a local Have I Been Pwned corpus filter without a per-lookup network call.github.com · read 12 Oct 2026
- Passwordless account login
- Yesgithub.com · read 16 Sep 2026
- Product
- PWDnow is a zero-knowledge, local-first password manager.github.com · read 12 Oct 2026
- Purpose
- PWDnow is a zero-knowledge, local-first password manager whose Rust daemon handles cryptography while the web interface exchanges encrypted data with it.github.com · read 12 Oct 2026
