Quadratic biometrics
Face, palm, gesture, and fingerprint — combined in quadratic two-factor style verification for near-zero false matches. Benefits of quadratic biometrics · NIST on biometrics
AI-powered security
Security that thinks — on your device, not ours.
LegendPass puts AI where your data is. Every recognition and scan runs locally, so intelligence works for you without your secrets ever reaching a server.
AI gesture recognition
Your own custom hand-wave AI gesture, learned and matched in real time on-device. No camera feed ever leaves your phone — the ultimate identity protection.
AI threat scan
On-device analysis flags weak, reused, and exposed credentials and nudges you to fix them before they become a breach.
Smart autofill
AI recognizes the right login from context and fills it in one tap — approved from your phone, never from a file on your machine. Use LegendPass to manage multiple account logins effortlessly.
No compromises. Ever.
There are no compromises when it comes to security. LegendPass encrypts with AES-256, hashes with HMAC-SHA256, holds no master password, and runs every biometric in the app's private sandbox.
See it in action
Watch how LegendPass works.
A full walkthrough of the app — from first setup to daily use.
Built on a zero-knowledge foundation
256-bit AES Zero-knowledge Encrypted on your device Face & palm unlock
Why LegendPass
We make security simple.
Four things we got right so you don't have to think about the rest.
Access from anywhere
Save unlimited passwords and reach them on iOS, Android, and in your browser — your vault follows you, not your desk. Use LegendPass to manage multiple account logins effortlessly.
One price, no add-ons
A single Premium plan unlocks everything. No per-feature upsells, no credit card to start, cancel from your store account any time. Need a safer way to manage your passwords without breaking the bank? This is it.
A vault only you can open
Everything is encrypted on your device with 256-bit zero-knowledge encryption and a key derived from your master password. We store ciphertext we cannot read — true secure password storage and identity protection.
More than passwords
Two-factor codes, private photos and videos, and sensitive documents live in the same vault — not scattered across four apps. Ideal for tech-savvy individuals seeking enhanced security and for families who want one private place.
Who benefits most? Individuals who want a private personal vault — you can explore common questions or see how our zero-knowledge design protects you. Note: no family/team sharing plans yet — each person keeps their own vault.
As an easy-to-use security solution, LegendPass is a secure password manager you can evaluate — see features.
How it works
Set up in three quiet steps.
No spreadsheet migration, no account to create before you can look around.
01
Set a master password
One password locks the vault on your device. It is never sent to us, so it can never leak from us.
02
Register your unlock
Add face, palm, or a gesture as your day-to-day unlock. The template is built and kept on your phone.
03
Fill the vault
Import logins, add 2FA codes by QR, and move private photos and documents in. Everything encrypts as it lands.
256-bit
AES encryption
3
ways to unlock
0
master passwords we hold
2
platforms + browser
Everything you need
Powerful protection, complete privacy.
One app, one master password, and every kind of secret you actually need to keep.
Password vault
Unlimited logins, cards, and secure notes — secure password storage organised and searchable, with a generator for the next one.
Built-in authenticator
Scan a QR code and your 2FA codes live beside the login they belong to. No second app to lose.
Face, palm, or gesture
Four ways to unlock — including AI gesture and quadratic biometrics — or two at once for dual verification. Templates never leave the device.
Private media vault
Move photos and videos out of your camera roll. They are encrypted at rest and play back only inside the app.
Document vault
Passports, tax paperwork, insurance files — the things you would rather not keep in a downloads folder.
Passkeys
Sign in to sites that support WebAuthn with no password at all — the key stays in the vault.
Auto lock
The vault seals itself when you step away, on a timer you choose. Walking off is not a security event.
Encrypted sync
Your vault follows you between devices as ciphertext with 256-bit zero-knowledge encryption. The sync layer moves data it cannot read.
Browser extension
Autofill on Chrome and Firefox. Approve each unlock from your phone, so the desktop never holds the key alone. Learn how autofill works.
Need a safer way to store logins? This secure password manager is an easy-to-use security solution with no tracking and zero-knowledge design. Explore all features · How we protect your identity
Built for typing less
One master password. Everything else is a tap.
Set it once, then open the vault with your face, your palm, or a gesture.
Biometric unlock
Verify your identity, your way.
Four unlock methods — all processed on the device, none of them ever transmitted.
Face Recognition
Look at the camera to unlock.
On-devicePalm Recognition
Show your palm to unlock.
On-deviceGesture Recognition
Show your gesture to unlock.
On-deviceFingerprint
Place your finger to unlock.
On-devicePowerful protection. Complete privacy.
LegendPass combines multi-factor biometrics with 256-bit encryption to keep your data safe and accessible only to you. Every biometric template is processed locally on the device — never sent to our servers, never shared, never used to identify you.
The app
One app, always in your pocket.
LegendPass on iOS and Android — passwords on one tab, your private album on the next.
For you
Access all your accounts, anywhere
Generate a strong, one-of-a-kind password for every account, then let LegendPass remember it so you never reuse one again.
Unlimited logins, cards, and secure notes
Two-factor codes stored beside the login they unlock
Autofill in Chrome and Firefox, approved from your phone
Private photos, videos, and documents in the same vault
Included on every plan, free or PremiumFor your household
Keep the shared things somewhere sane
The router password, the streaming logins, the scan of the lease. Put them somewhere encrypted instead of a notes app.
Store shared logins and documents in one place
Unlock with face or palm — no password typed in front of anyone
Everything encrypted before it leaves the device
Works the same on iOS and Android
Included on every plan, free or PremiumTrust
Why the design is the guarantee.
Not a promise in a policy document — an architecture that makes the promise hard to break.
Encrypted before it leaves
Your vault is sealed on the device with AES-256. What syncs is ciphertext we have no key for.
Biometrics stay on the phone
Face and palm templates are generated and stored locally. They are never uploaded, shared, or used to identify you.
No recovery backdoor
We cannot reset your master password, because we never had it. That is the trade we made on purpose.
iOS, Android, and browser
A native app on both platforms plus a Chrome and Firefox extension that approves each unlock from your phone.
Pricing
Simple, transparent pricing.
One Premium plan with everything. Choose monthly or save 42% with yearly.
MonthlyYearlySave 42%
Free forever
$0forever
Perfect for individuals who want complete password security at no cost.
Get Started Free Unlimited passwords and secure notes
Strong password generator
Built-in authenticator for 2FA codes
Face, palm, or gesture unlock
Browser extension for Chrome and Firefox
Encrypted sync across devices
Feature comparison
| Feature | Free | Premium |
|---|---|---|
| Unlimited passwords & secure notes | ||
| Strong password generator | ||
| Built-in 2FA authenticator | ||
| Face, palm, gesture & fingerprint unlock | ||
| Browser extension (Chrome, Firefox, Edge) | ||
| Encrypted sync across devices | ||
| Unlimited media vault (photos & video) | ||
| Unlimited document vault | ||
| Dual verification (face + palm) | ||
| Priority support |
Zero-knowledge encryption
We never see your master password
AES-256-CBC + HMAC
Encrypt-then-MAC on your device (PBKDF2 ×310k)
Cancel anytime
No lock-in, manage in App Store / Play Store
Secure billing
Handled by Apple & Google, not us
Premium is $5.83/mo billed $69.99/yr — 42% savings. Subscriptions are handled by the App Store (iOS) and Google Play (Android), renew automatically, and can be cancelled anytime from your store account settings.
Download
Available everywhere you are.
Get LegendPass on your phone and your browser, and keep the vault in sync between them. The Chrome extension also works in Brave, Edge, and Opera.
Windows
Desktop app
Coming soon
macOS
Desktop app
Coming soon
Download & install
Get LegendPass in under a minute.
Pick your device. Each install is free, no credit card required, and the vault syncs across every platform you add.
Chrome · Brave · Opera · Edge
Chrome Web Store extension Add-on works in every Chromium browser
FreeInstall the mobile app first to create your account, then add the browser extension so autofill, passkeys, and one-tap approval work across your desktop browser. Windows & macOS native desktop apps are coming soon.
The company
GAMMA PASS LLC
Limited Liability Company · State of New Mexico · Entity ID 0008102768
GAMMA PASS LLC builds secure digital identity technology for individuals and businesses. We believe privacy is a right, not a feature — and every product decision we make has to survive that test before it ships.
Registered U.S. company Apple Developer Program Google Play Developer Zero-knowledge architecture
FAQ
Frequently asked questions.
Jump to
In this guide.
Summary
Key takeaways.
The short version before the detail — what actually matters when you pick a password manager.
- A good password manager is free to start, lets you keep ownership of your master password, and stores nothing readable on its servers.
- Zero-knowledge encryption means a breach of the vendor's servers cannot expose your vault — there is no key to steal.
- Length beats complexity: a long, random passphrase is harder to crack and far easier to type than a short jumble of symbols.
- Two-factor authentication and biometric unlock stop a stolen password from being useful on its own.
How to
How to choose a password manager in 5 steps.
A short, numbered guide you can follow before you download anything.
- Encryption — confirm the manager uses zero-knowledge architecture with 256-bit encryption and that your master password never leaves the device.
- Unlock strength — count the biometric and unlock methods; a single fingerprint is weaker than multi-factor options.
- Privacy model — check whether the vendor can read your stored data and how your biometrics are handled (on-device is the gold standard).
- Value — compare what the free plan really includes against paid pricing, not just the headline price.
- Platform fit — make sure iOS, Android, and your browser are all supported with native autofill.
By the numbers
Why the world needs a password manager.
Independent research, cited inline and attributed. Sources linked below each figure.
of cybersecurity breaches are caused by human error, not broken encryption.
the World Economic Forum estimates that 95% of cybersecurity breaches are traced to human error.
Source: World Economic Forum, Global Cybersecurity Outlook 2022 ↗of web-application breaches involve credential theft — stolen or weak passwords.
Verizon's 2022 Data Breach Investigations Report found credentials were involved in 86% of web-application breaches.
Source: Verizon, Data Breach Investigations Report 2022 ↗of breaches involve a non-malicious human element, and 31% involve phishing.
the 2024 Verizon DBIR reported human error contributed to 68% of breaches, with phishing behind 31%.
Source: Verizon, Data Breach Investigations Report 2024 ↗is how fast an 8-character lowercase password can be cracked with brute force.
Hive Systems' 2023 password table shows a weak 8-character password can fall in under a second.
Source: Hive Systems, Password Table 2023 ↗Comparison
LegendPass vs 1Password, LastPass & Bitwarden.
Feature-by-feature, based on each product's publicly documented plans. Feature sets change — check current listings before you buy.
| Feature | LegendPass | 1Password | LastPass | Bitwarden |
|---|---|---|---|---|
| Usable biometric unlock | Yes — face, palm, gesture, fingerprint | Fingerprint only | Fingerprint / Face ID | Fingerprint / Face ID |
| Browser autofill (Chrome + Firefox) | Yes | Yes | Yes | Yes |
| Secure document & media vault on-device | Yes | Paid add-on | Paid add-on | Paid add-on |
| True zero-knowledge, key never leaves device | Yes | Yes | No | Yes |
| Free plan with unlimited passwords | Yes | No | Yes | Yes |
Based on each vendor's public feature sets; verify current details with the provider.
Q&A
Password manager questions, answered.
What makes LegendPass different from other password managers?
LegendPass pairs 256-bit zero-knowledge encryption with on-device AI gesture and biometrics (face, palm, gesture, fingerprint where supported) — unlike most managers that offer only fingerprint or Face ID. Your secure password storage stays readable only by you, with identity protection built in. Learn how we secure your vault or see 40 detailed Q&As.
Is a password manager really safer than remembering passwords?
Yes. The World Economic Forum links 95% of breaches to human error, and Verizon found 86% of web-application breaches involved stolen or weak credentials. A manager removes password reuse and makes every account long and unique.
Can a password manager be hacked?
Servers can be breached, but a zero-knowledge manager stores only ciphertext it holds no key for — so your vault stays unreadable. That is why the key that unlocks your data must never leave your device.
Do I need biometrics on a password manager?
Not strictly, but on-device biometrics add a second factor that a stolen password alone cannot bypass. They also remove the need to type your master password in public. Our quadratic biometrics goes further with face, palm and AI gesture — see the NIST biometrics overview for background.
Are free password managers any good?
The best free plans cover unlimited passwords, autofill, and a built-in authenticator. LegendPass keeps all of that free; premium adds on-device document and media vaults plus dual-verification biometrics.
Need a safer way to manage your passwords?
Use LegendPass to manage multiple account logins effortlessly. Every login gets secure password storage with 256-bit zero-knowledge encryption and on-device AI gesture, so your identity protection stays in your hands — ideal for tech-savvy individuals seeking enhanced security.
LegendPass at a glance
- Encryption
- 256-bit AES, zero-knowledge
- Unlock methods
- Face, palm, gesture, fingerprint
- Free plan
- Unlimited passwords + 2FA
- Platforms
- iOS, Android, Chrome, Firefox
- Browser coverage
- Chrome, Brave, Edge, Opera, Firefox
- Security architecture
- Zero-knowledge, on-device biometrics
Encryption: 256-bit AES, zero-knowledge. Unlock methods: Face, palm, gesture, fingerprint. Free plan: Unlimited passwords + 2FA. Platforms: iOS, Android, Chrome, Firefox. Browser coverage: Chrome, Brave, Edge, Opera, Firefox. Security architecture: Zero-knowledge, on-device biometrics. Learn all features or benefits of quadratic biometrics.
How it works
What zero-knowledge looks like, in code.
A simplified view of how a vault is encrypted and synced without the server ever seeing your key.
# A LegendPass vault unlocks only with a key derived from your master password. # The plaintext key is never transmitted; only ciphertext syncs to the server. key = PBKDF2_HMAC_SHA256(master_password, salt, iterations=310000) vault_ciphertext = AES256_CBC_HMAC.encrypt_then_mac(key, all_secrets) send(vault_ciphertext) # server sees ciphertext only
What does "the key never leaves your device" mean in practice?
Your master password is turned into an encryption key on your phone or computer using a one-way key-derivation function. That key encrypts your vault locally, and only the resulting ciphertext is synced. Because the server never receives the key — only ciphertext it cannot open — even a full compromise of our servers would not expose your passwords, notes, or documents.
Glossary
Key terms, in plain English.
- Zero-knowledge encryption
- A design where the service stores only ciphertext it holds no key for. Your master password derives the encryption key on your device, so the vendor cannot read your vault even under subpoena or breach.
- Master password
- The single password you set that unlocks everything else. It is the one secret you must remember — never share it, never write it on a sticky note, and let the manager generate all your other passwords.
- Two-factor authentication (2FA)
- A second check beyond your password — a time-based code from the app, a biometric, or a hardware key. It makes a stolen password alone useless.
- Passkeys
- A modern passwordless sign-in backed by public-key cryptography and your device biometrics. LegendPass supports passkeys alongside classic passwords.
Real-world example
What switching actually looks like.
Example — a small team of 12 switched from shared spreadsheets and password reuse to LegendPass. Each member stops reusing the same login across work and personal sites (the exact behavior Verizon links to credential-theft breaches). Because the vault is zero-knowledge and each member unlocks with on-device biometrics, the team removed a shared master-password single point of failure. The migration took under an hour using the one-click import tool, and no passwords were ever sent in a group chat again.
The honest view
The trade-offs, fairly stated.
A central vault is a single point of failure — on the other hand — concentrating your secrets in one encrypted, zero-knowledge vault is safer than spreading them across dozens of sites where each breach leaks a different password.
Cloud sync means data leaves your device — on the other hand — only ciphertext travels. Your documents and biometric templates stay local, and the sync key never leaves your device, so the trade-off of convenience costs little privacy.
A new password manager has less history than the big names — on the other hand — that is exactly why every server-side claim is zero-knowledge and every biometric is processed on the device, not entrusted to a larger vendor's cloud.
Verdict
So, which password manager should you pick?
If you want a free password manager that keeps your vault truly private, protects it with biometrics only you can use, and lets you keep your own master password, LegendPass is a strong choice. The free plan already covers unlimited passwords, autofill, the authenticator, and biometric unlock; Premium adds on-device document and media vaults and dual verification. Start with the free plan — there is no card required and nothing about your vault is visible to us.
This guide was last updated on . Independent figures are cited to their original sources so you can verify them yourself.
About the author
LegendPass Security Team. This guide is written and reviewed by the engineers and security researchers behind the LegendPass vault — the same team that ships its zero-knowledge encryption and on-device biometric unlock on iOS, Android, Chrome, and Firefox. We evaluate password managers on the criteria we use to build our own: encryption strength, privacy, and honest value.