heybesafe.com

What It Is

Hey Be Safe is a password management service provided by Mill Creek Technology LLC, positioned around the idea of “Your passwords, only ever yours.” It uses a zero-knowledge and end-to-end encryption design: the master password never leaves your phone or browser, encryption is performed locally, and the server only stores encrypted blobs. The text claims that even if the database were fully leaked, no readable content would be exposed.

Core Capabilities and Security Architecture

In terms of protection category, it is a personal password vault/password manager. Its focus is not network perimeter defense, but secure credential storage. Its biggest feature is that the provider cannot read user data, and it explicitly states that “losing the master password = losing the vault,” meaning the provider cannot recover it on the user’s behalf. This reinforces a genuine zero-knowledge model, but also requires users to remember and back up their master password responsibly. It also claims to use no tracking cookies and no analytics, and mentions an open architecture plus a coordinated vulnerability disclosure email address.

Deployment, Management, and Integrations

The deployment model appears closer to a hosted cloud service with locally encrypted clients. The text mentions phones and browsers, but does not specify particular apps, browser extensions, offline mode, import/export features, sharing mechanisms, or APIs. On the management side, the only visible capability is that accounts can be closed via Safe Settings, and major terms changes are notified by email. There is no disclosed enterprise admin console, permission grouping, audit logs, risk alerts, SSO, or directory integration. As a result, it currently looks more like a lightweight personal tool than a mature enterprise password management platform.

Pricing and Support

Pricing information is very limited. The only confirmed point is that a free tier currently exists, and that the free tier does not include an SLA. The service is provided on a best-effort basis, and the terms state that it does not guarantee uninterrupted operation, error-free service, or the absence of security incidents. Paid plans, payment methods, refund policy, and enterprise support tiers are not disclosed. Support is mainly available via [email protected].

Pros, Cons, and Who It’s For

Its strengths are a clear zero-knowledge model, strong privacy orientation, local encryption, and reduced risk from centralized data breaches thanks to server-side unreadability. Its weaknesses are limited public documentation, and a lack of compliance certifications, third-party audits, enterprise features, and availability commitments. It is suitable for individuals, families, or privacy-sensitive users to try. If an organization needs compliance, auditing, centralized control, and an SLA, alternatives such as Bitwarden, 1Password, and Keeper should be evaluated first.

Access from China

The text does not provide information about mainland China network access, payment methods, or localization, so real-world availability is unknown. If access is not stable, users in China may consider KeePassXC, which supports local deployment or offline use, or evaluate password management alternatives that perform more reliably in China’s network environment.