AuthNest

Your passwords, encrypted before they leave your phone.

A password manager with built-in two-factor codes and passkeys. Everything is encrypted on your device and stored in your own Google Drive. There is no AuthNest server, no account to create, and nothing for us to read.

Get it on Google Play Chrome extension Privacy policy

What it does

Passwords

Save a login once and fill it anywhere on Android, in apps and in the browser.

Two-factor codes

Built-in authenticator. Tap a code to copy it; the clipboard clears itself after a minute.

Passkeys

Create and use passkeys as a system credential provider, so sites that support them need no password at all.

Password health

Finds weak and reused passwords. Checked on the device; nothing about them is sent anywhere.

How the security works

Your master password never leaves the device. It is stretched with Argon2id into a key that unwraps your vault. We never receive it, never store it, and cannot reset it.
Encryption happens before anything is uploaded. Each record is sealed with XChaCha20-Poly1305 on your phone. What reaches Drive is ciphertext.
It is stored in your Drive, not ours. AuthNest uses the private application folder of your own Google Drive. We operate no server and hold no copy.
A recovery key, shown once. Generated on your device so you can get back in if you forget your master password. We have no copy of that either.
No analytics, no advertising, no tracking. The app contains no third-party analytics or advertising code, and this website loads no external resources and sets no cookies.