Skip to content
SPECIFICTION
Get listed

PassWeb

github.com

WebSelf-hosted
Visit github.com
Spec score 6.8 #101 of 104 in Password Managers

Spec sheet

Purpose
PassWeb is an online/offline web application for securely managing passwords.Read 8 Oct 2026 · github.com
Support
The author asks users to report problems and says browser issues should be emailed with detailed reproduction steps.Read 8 Oct 2026 · github.com
Account recovery limit
The README says forgetting the master password means the encrypted data is irretrievably lost because there are no backdoors or secondary passwords.Read 8 Oct 2026 · github.com
Account setup
The README says users must contact the administrator to request an account, which is created with a temporary password.Read 8 Oct 2026 · github.com
Browser support
The README says PassWeb works on modern browsers, including recent Internet Explorer, Chrome, Firefox, and Safari releases.Read 8 Oct 2026 · github.com
Client-side privacy
The README says data is decrypted only on the client and unencrypted data never leaves the machine.Read 8 Oct 2026 · github.com
Encryption
The account data file is encrypted with 256-bit AES in CBC mode, and the README says the encryption key uses PBKDF2 with SHA-512 and 1,000 iterations.Read 8 Oct 2026 · github.com
Hosting
The client can be hosted on any web server or file server, and the storage API has ASP.NET and Node.js implementations.Read 8 Oct 2026 · github.com
Intended use
The author says PassWeb was intended to be safe for normal use in low-risk environments and advises users to evaluate it for their own needs and risks.Read 8 Oct 2026 · github.com
Local encryption
Account data is decrypted only on the client; the server does not see the username, password, or unencrypted data.Read 8 Oct 2026 · github.com
Offline use
Users can cache encrypted passwords for offline access, and changes synchronize with the server when PassWeb is used online.Read 8 Oct 2026 · github.com
Password tools
Users can generate random complex passwords, copy or select stored names and passwords, and keep additional information in notes.Read 8 Oct 2026 · github.com
Recovery limit
The README says forgotten master-password data is irretrievably lost because there are no backdoors or secondary passwords.Read 8 Oct 2026 · github.com
Security guidance
The author recommends HTTPS for both the storage API and client files, and warns users to avoid entering their master password on untrusted devices.Read 8 Oct 2026 · github.com
Server implementations
The storage REST API implementations are provided for ASP.NET and Node.js.Read 8 Oct 2026 · github.com
Session protection
PassWeb logs users out after three minutes of inactivity and re-masks revealed names and passwords after ten seconds.Read 8 Oct 2026 · github.com
Storage
It stores encrypted password data in the cloud so it can be accessed from anywhere.Read 8 Oct 2026 · github.com
Storage options
The Node.js implementation supports storing data as blobs in Microsoft Azure.Read 8 Oct 2026 · github.com
Supported platforms
webRead 20 Sep 2026 · github.com

Where Specifiction places it

Alternatives to PassWebAll alternatives →