SpokPass
On-device encryption · Argon2id + AES-256-GCM

Password managerYour passwords are encrypted before they ever leave you.

This isn't marketing language, it's how the product is built: the key is derived from your master password, on your own computer, and never leaves it. SpokPass servers receive blocks they cannot open — not us, and not anyone who steals our database.

Export anytime, in an open format · No surprise auto-renewal · Your data stays yours

The proof

What you see, and what the server sees

You don't have to take our word for it. Open your browser console, the Network tab, and save a password: what goes to the server looks like the panel on the right.

In your browser
TitleBanca Transilvania
Usernamejohn.smith
PasswordL7#kQ2vw!mZ4pR9t
Notespare card in the drawer
In our database

Plus a few housekeeping fields: when it was last changed and which folder it sits in. That's all. The title, the address, the username, the password and the notes are all inside the block.

The consequence, said plainly: if you forget your master password and lose the recovery kit you got at sign-up, the data in your vault is gone for good. There is no “forgot my password, send me a link” — we have nothing to open your vault with. That is the price of nobody else being able to open it either.
The mechanism

What happens when you save a password

01

The key is born on your device

Your master password produces an encryption key, on your own computer. The process is deliberately slow and memory-hungry (Argon2id, 64 MiB), so it can't be attempted millions of times on a graphics card.

02

The data is sealed locally

Everything that means anything goes into a single AES-256-GCM block. Change one bit of it — even with access to the database — and the block refuses to open at all.

03

The server receives noise

Search happens in your browser, after decryption. A search index on the server would mean leaking exactly what we promised not to see, so there isn't one.

For companies

For companies, not just for one person

Users with roles and paid seats, an access log, revoking access when someone leaves. With one limit we state up front: not even an administrator can read someone's vault. When someone leaves, you take away their access, and work passwords get changed at the source.

Clear roles

Owner, administrator, member. Three of them, not a matrix of twenty checkboxes nobody understands six months later.

Seats, not forgotten accounts

A suspended person frees up the seat. You don't pay for years for accounts nobody remembers.

Access log

Who signed in, when, from where. Never what they opened — that would rebuild, over time, the map of their digital life.

Your data leaves, it isn't held hostage

Open-format export, any time, including after your subscription expires.

Pricing

What it costs, with no asterisk

A subscription, not a one-off payment. A vault has to be synced and guarded for as long as you use it, and a payment made in 2026 doesn't keep servers running in 2032 — anyone promising otherwise either shuts down or changes the terms along the way.

Personal

For one person and all their devices.

20RON / month

excl. VAT

Or 199 RON a year — cheaper than monthly.

  • Passwords, cards and notes, no limit
  • Sync across every device
  • Password generator and breach checking
  • Recovery kit
  • Export any time, in an open format

1,0 GB for documents, included.
Extra storage: 5,0 GB for 7 RON/month. Take as many packs as you need.

Choose this plan
Most popular

Family

Up to 6 separate vaults, plus one shared folder.

30RON / month

excl. VAT

Or 299 RON a year — cheaper than monthly.

  • Everything in Personal, for each member
  • Shared folder (Wi-Fi, subscriptions, documents)
  • Everyone has their own vault, which the others can't see
  • Emergency access for one chosen person

1,5 GB for documents, included.
Extra storage: 10 GB for 11 RON/month. Take as many packs as you need.

Choose this plan

Team

For companies. Priced per user, minimum 3.

16RON / month / user

excl. VAT

Or 160 RON a year per user — cheaper than monthly. Minimum 3 users.

  • Folders per department, with permissions
  • Access log for every account
  • Revoking access when an employee leaves
  • Password policies enforced company-wide
  • Company invoicing, through SpokInvoice

2,0 GB for documents, included for every user.
Extra storage: 15 GB for 8 RON/month and user. Take as many packs as you need.

Choose this plan

No auto-renewal you find out about from your bank statement. Export stays open even after you leave — the data is yours, not ours.

File vault

What storage for documents costs

Documents live in the same vault as the passwords, encrypted on your device before anything leaves it. Storage is paid for separately from the plan because it genuinely costs money every month — a price hidden inside an “unlimited” plan is paid anyway, only by everyone.

Personal

1,0 GB for documents, included.

7RON / month

excl. VAT · 8.47 RON incl. VAT

  • +5,0 GB per pack
  • As many packs as you need, any time
  • Files up to 100 MB

From the iPhone app: 9.99 RON per month, VAT included.

Family

1,5 GB for documents, included.

11RON / month

excl. VAT · 13.31 RON incl. VAT

  • +10 GB per pack
  • As many packs as you need, any time
  • Files up to 100 MB

From the iPhone app: 15.99 RON per month, VAT included.

Team

2,0 GB for documents, included for every user.

8RON / month / user

excl. VAT · 9.68 RON incl. VAT

  • +15 GB per pack
  • As many packs as you need, any time
  • Files up to 100 MB

The price in the iPhone app is higher because the payment goes through the App Store and Apple takes its share of it; we are left with the same amount as from a card payment on the site. Storage is measured encrypted, exactly as it arrives at the storage provider.

Before trust

The questions people ask before trusting anyone

How do I know you don't read my passwords?

Not because we say so. Open your browser console, the Network tab, and save a password: you'll see a block starting with “sp1.” and nothing readable. On top of that, the cryptography lives in a single place in the code, and an automated check stops the release if anyone slips encryption elsewhere or writes a key into browser storage.

What happens if SpokPass shuts down tomorrow?

You export your vault any time, in an open format. Your data isn't a hostage — a password manager you can't leave is a trap, not a product.

If my subscription expires, do I lose my passwords?

No. The vault stays readable and exportable. Only new saves stop. The passwords are yours; the subscription pays for the service, not for the right to see your own data.

Can my company's administrator see my passwords?

No, and it isn't a setting they could change. Every vault is encrypted with its owner's key. An administrator can revoke someone's access and see when they signed in — never what they keep inside.

Who's behind this?

The same team that builds SpokAdmin (property-association management) and SpokInvoice (invoicing and Romanian e-Invoicing). Products running on real money, for real customers, for years.

On your phone too

The same vault, in your pocket — on iPhone and on Android. Unlock with Face ID or fingerprint, with the key kept in your phone's secure area, never on a server.

Your vault. The key stays with you.

We're not asking you to trust us on our word. We show you what leaves your device, we hand you the key on the way out, and we tell you plainly what happens if you lose it.