ActivPass is a simple and local password management tool

The following software is required to run or compile ActivPass:

• Windows OS
• .NET 8.0
• Visual Studio
• C# with WPF

Password items are grouped into so-called Containers. For safety reasons, a container is an isolated unit. This means a password item exists in only one specific container. Items can not be shared between containers. ActivPass stores containers as an encrypted file on the local disk. The so-called "master password" is used to open a container (decrypt the container). The master password is set initially when the container is created. When you lose the master password it is impossible to open the container again. It is important to use a strong password as the master password, to secure the container against brute force attacks.

Each container is stored as encrypted json file (*.bin) in AppData\Roaming\ActivPass. Container files are encrypted with AES-256 CBC. The key for the encryption is calculated with the SHA-256 hash and the key derivation function Argon2i. When the container is unlocked, the container data are stored in memory. Data on disk is always encrypted. You can backup and restore containers, simply by copying and replacing the container files. It is possible to export unlocked containers as unencrypted CSV documents, for backup or exchange purposes. CSV documents can be imported and also merged into other containers with a different data set.

The user interface is implemented with WPF. Most elements are styled with their own design to create a modern user interface. The interface can be configured for different languages, but currently only for German and English. You can find detailed screenshots of the user interface in the wiki ui screenshots.

The application stores the configuration in the file Configuration.xml in AppData\Roaming\ActivPass. The configuration can be changed in the user interface. When no configuration exists, a default configuration is used and a new configuration file will be created.

A password strength is calculated for each stored password to give the user feedback on the quality of the password. Warnings are also issued for saved URLs if they do not use encrypted protocols. There is also a global view where you can see all warnings and password strengths for a given container.

The documentation for ActivPass is hosted in the GitHub Wiki.