pickey.ai

What It Is

PicKey is a visual password manager from Neural Heaven Inc. Its core idea is to replace the traditional master password with a Master Key made up of personal images and 3D animated collectibles. Users log in through their phone, biometrics, and “personal memory scenes” captured by the camera. It also offers MagicPass, which algorithmically regenerates passwords on demand, reducing the need to store complete passwords.

Core Capabilities

In terms of protection, it covers password management, autofill, password generation/storage, cross-device sync, and secure sharing. Its security mechanisms include AES-256 GCM, elliptic-curve encryption, salted hashing, biometrics, secure key derivation, and notifications for new-device access. MagicPass is its key differentiator: the system stores only a unique index for each site or app, then regenerates the password when needed. If users choose custom passwords, those are still encrypted and salted before storage. For deployment, PicKey currently supports iOS and browser extensions for Chrome, Safari, Firefox, and Edge. Android is not yet available, and there is no standalone desktop app.

Pricing and Target Users

The Free plan can manage up to 40 passwords, with no limit during the first 10 days. It supports unlimited devices and up to 4 MasterKeys. Pro costs $4/month, billed annually, and unlocks unlimited passwords, unlimited MasterKeys, password sharing, Next of Kin, Living Will, folders, and notes. Pro-Family costs $7/month, billed annually, and adds 5 licenses for family members or friends. PicKey is best suited to individual users, families, and small-scale use cases that prioritize password inheritance and secure sharing.

Pros and Cons

Its strengths are a lower memory burden for the master password and visual login that reduces the risk of keylogging. MagicPass also reduces the risk of centrally storing complete passwords. It supports imports from LastPass, 1Password, Apple Passwords, Dashlane, and Chrome Password Manager. The drawbacks are also clear: Android is not supported, desktop use depends on browser extensions, and the extensions currently require an internet connection. Third-party security audits are only described as “planned,” with no disclosed compliance certifications. Workflows such as visual recognition, email verification, and initial mobile login may not suit every user.

Access from China

The source material does not provide information on accessibility from mainland China, payment methods, or localization, so its China access status is unknown. If network connectivity, RMB payments, Chinese-language support, or local compliance are required, it is worth evaluating alternatives such as Bitwarden, 1Password, and Apple Passwords as well.