persipass.com

What It Is

PersiPass is an offline-sync password manager built around a “storeless” approach. Instead of emphasizing the storage of a traditional password database, it generates persistent passwords based on the URL, a specified password length, an expiration period, an optional username, and a secret encryption key. The website also states that the secret encryption key is not exposed to end users, but can be recovered through a mnemonic phrase made up of a set of easy-to-remember words.

Core Capabilities and Security

In terms of protection model, PersiPass is a personal password security tool focused on reducing the risk of password vault theft or cloud-side data leaks. Its public materials mention the use of AES-256, SHA256, and SHA512, while emphasizing easy setup, easy synchronization, and ease of use. Its privacy policy states that the app does not collect user or device data, and does not use third-party services that may collect information, which is a plus for privacy-conscious users. However, the site does not disclose key details such as whether the source code is open, whether it has undergone security audits, its threat model, or the range of supported platforms. As a result, it is not possible to verify the maturity of its password-generation and key-protection implementation.

Pricing, Deployment, and Management

For pricing, the website only shows a Donate option and suggests users can buy the developer a coffee if they like the app. No subscription, one-time purchase, or enterprise pricing is shown. As for deployment, the text only indicates that it is an app and supports offline synchronization; it does not specify support for Android, iOS, desktop, or browser extensions. Management and alerting capabilities are largely absent: there is no mention of centralized policies, team sharing, audit logs, anomaly alerts, permission tiers, or an admin console.

Pros, Cons, and Best-Fit Users

Its strengths are a clear storeless concept that can reduce the exposure surface of a traditional password vault, offline synchronization that lowers reliance on cloud services, and relatively strong privacy commitments. Its weaknesses are the limited public information available, as well as the lack of compliance certifications, third-party audits, support-channel details, and integration capabilities. It is better suited to individual users, privacy-sensitive users, and those willing to understand and properly safeguard their mnemonic phrase. It is not suitable for organizations that require team collaboration, SSO, directory integration, compliance auditing, and centralized operations.

Access from China and Alternatives

Access from mainland China cannot be determined from the crawled text alone, and payment methods are not disclosed. If you need a more mature ecosystem and stronger cross-platform capabilities, alternatives such as Bitwarden, 1Password, KeePass/KeePassXC, and Enpass are worth considering. Among them, the KeePass family is also more locally oriented, while Bitwarden and 1Password are better suited to team and enterprise management.