KeyGuard Password is now KeyCare Pass. Same vault, same account, a new name and address.

by GovPAM

Your passwords, safe and in your hands

KeyCare Pass keeps your passwords, passkeys, cards and notes in a vault that is encrypted on your device. Fill them in with a click, share them with the right people, and run it in our cloud or on your own server.

For business

Billed monthly, cancel any time

For personal use

Card or Instant EFT through PayFast

  • End-to-end encrypted
  • Open source
  • Hosted in the EU
  • Self-hosting available
  • Passkeys built in

Whether it's for work or for home

One product, two ways to use it. Pick the side that fits, or both.

For business

Give every person the access they need, and nothing more

Share logins through collections and groups, set rules for every account, and see who did what in the event log. Add people the day they start and remove them the day they leave.

For you and your family

One strong password to remember. KeyCare Pass remembers the rest.

Save logins as you browse, fill them in with a click, and keep cards, notes and passkeys in the same encrypted vault. Families share a household collection and each keep a private vault.

Why people choose KeyCare Pass

Security that does not slow anyone down

Encrypted before it leaves your device

Your master password unlocks a key that only you hold. The server keeps encrypted data that it cannot read.

How encryption works

Share without pasting passwords into chats

Collections give each team the logins it needs. Send shares a note or a file through a link that deletes itself.

Sharing and Send

Find weak and reused passwords

Vault health reports list the logins that are weak, reused or already exposed in breaches, so you know what to change first.

Password health

Bring people in and out cleanly

Invite members, confirm them, and revoke access the moment someone leaves. Groups keep permissions in order as you grow.

The Admin Console

Bring your team's passwords under one roof

Teams starts at R 149 per person per month. Pay monthly through PayFast and add seats whenever you need them.

How KeyCare Pass keeps you in control

The tools teams and families use every day, built into one vault.

Vault health at a glance

See which passwords are weak, reused or exposed, and fix the riskiest first.

Password health

Rules for every account

Enterprise organizations can require two-step login, set master password rules and keep members in one organization.

Admin Console and policies

Event logs you can rely on

Teams and Enterprise record who viewed, changed or shared items, and every sign-in, with its IP address.

Event logs

Collections for every team

Group logins by team, client or system, and choose who can view, edit or manage each collection.

Shared collections

Authenticator codes built in

Keep the six-digit codes for two-step login next to the password they belong to.

Authenticator codes

Passkeys, saved and synced

Save a website's passkey in your vault and use it wherever you sign in to KeyCare Pass.

Passkeys

See all features

Security

Security you can check for yourself

No secret sauce: the design is documented and the code is open.

Zero-knowledge encryption

Vault data is encrypted with AES-256 and checked with HMAC-SHA256 on your device. GovPAM never receives your master password.

Strong key derivation

Your master password is stretched with PBKDF2-SHA256, 600,000 iterations by default, or with Argon2id before it becomes a key.

Open source

The apps are GPL-3.0 and the server AGPL-3.0. The source of every release that runs our service is published.

Two-step login

Protect your account with an authenticator app, a security key or passkey, email codes or Duo.

Sign-in alerts

See every sign-in to your account from the last 90 days, and get an email when it signs in from an address it has not used lately.

Your own server, if you prefer

Organizations can run KeyCare Pass on their own Docker host and keep every byte on their own infrastructure.

How KeyCare Pass protects your data

Works where you work

Use the web vault in any browser and fill passwords with the extension. Desktop and mobile apps are coming.

Frequently asked questions

What is KeyCare Pass?

KeyCare Pass is a password manager made by GovPAM. It keeps your passwords, passkeys, cards, identities, secure notes and SSH keys in an encrypted vault, fills them in on websites through the browser extension, and lets families and organizations share them safely.

Can GovPAM see my passwords?

No. Your vault is encrypted on your device with a key derived from your master password, and the server only ever receives the encrypted result. GovPAM never receives your master password, so it cannot read your vault or reset your master password for you.

Is there a free plan?

No. You can create an account and look around the web vault for free, but using the browser extension and saving items needs a plan: Premium for one person, Families for up to six, or Teams and Enterprise for organizations.

Which browsers and devices can I use?

The web vault works in any modern browser. The browser extension installs from the Chrome Web Store in Chrome, Microsoft Edge, Brave, Opera and Vivaldi. Desktop apps for Windows, macOS and Linux and mobile apps for iOS and Android are on the way. See the download page.

Can I bring my passwords from another password manager or my browser?

Yes. Export them from your current password manager or browser and import the file in the web vault under Tools > Import. The help center has steps for the common ones.

Where is my data stored?

KeyCare Pass's service runs on servers that GovPAM operates in the European Union. Organizations that prefer can run KeyCare Pass on their own server instead. The trust center lists the services involved.

What happened to KeyGuard Password?

KeyGuard Password is now called KeyCare Pass. Your account, your vault and your master password stay the same. Read what changed.

Start protecting your passwords today

Create your account, then choose the plan that fits.