Frequently asked questions.

MystSafe is a password manager and secret vault built around your trusted devices. It stores passwords and other secrets locally, unlocks through device authentication, and synchronizes signed, encrypted updates through your chosen Google Drive or GitHub account. It includes private personal vaults, Family Shared, and Share Once, with permanent Free and optional Pro plans.

MystSafe is built for iPhone, iPad, and Mac. The public download page currently says the apps are coming live soon; use that page for the verified App Store link when available. A browser extension is not included in the current product offering. Share Once recipients can view a shared secret in a supported browser without installing the app.

Check the format before switching. MystSafe supports its own encrypted .mystsafe and readable .mystsafe.json exports on iPhone, iPad, and Mac. Mac also imports Keeper Desktop JSON without attachments. Direct imports from 1Password, KeePassXC, Bitwarden, LastPass, and Dashlane are not listed among the currently supported formats.

Export is included in Free and Pro. Family Shared content is not automatically included in a personal vault export; save a private copy first if you want to include it.

Android and Windows are planned. No public release date has been announced.

MystSafe’s strongest advantages over 1Password are greater account privacy, user-controlled vault custody, master-password-free access, application-layer post-quantum protection, and affordability.

MystSafe requires no separate vault account or email registration, and it does not keep a permanent central vault database. Instead, vaults remain on users’ devices, with encrypted updates synchronized through their chosen Google Drive or GitHub storage. MystSafe also eliminates the need to create and remember a separate master password. Together, these choices reduce dependence on the password-manager vendor.

MystSafe’s architecture also provides hybrid post-quantum protection for device-to-device key establishment and update authentication—a substantive technical distinction from the browser-to-service post-quantum TLS deployment identified for 1Password. Finally, MystSafe offers a permanent free plan and substantially lower pricing: its listed $19.99 annual Pro plan covers up to seven people, compared with 1Password Families’ regular annual price of $71.88 for five.

MystSafe’s strongest advantages over Keeper center on greater account privacy, user-controlled vault custody, application-layer post-quantum protection, and family value. Its design brings these advantages together with master-password-free access and a permanent free plan.

MystSafe requires no separate vault account or email registration and does not keep a permanent central vault database. Vaults remain on users’ devices, with signed, encrypted updates synchronized through their chosen Google Drive or GitHub storage. Local device authentication eliminates the need to create and remember a separate master password, keeping vault access under the user’s control.

MystSafe provides hybrid post-quantum protection for device-to-device key establishment and update authentication within its application protocol. It also offers a permanent free plan and substantially lower family pricing: MystSafe’s listed US $19.99 annual Pro plan covers up to seven people, compared with the $91.99 annual Family price for five users listed by Keeper’s help center.

MystSafe’s strongest advantages over KeePassXC are master-password-free access, integrated device pairing and synchronization, built-in sharing workflows, and application-layer post-quantum protection. Its design brings these capabilities together around trusted devices.

Each MystSafe device generates its own cryptographic keys and uses local device authentication, eliminating the need to create and remember a separate master password. Adding another device uses a short-lived QR code and five-word verification. Signed, encrypted updates synchronize through your chosen Google Drive or GitHub storage, with trusted devices verifying updates before accepting them.

Family Shared provides ongoing sharing while each participant keeps a private personal vault. Share Once lets you send a secret through a short-lived link that a recipient can open without installing MystSafe. The application protocol combines classical and post-quantum cryptography for device-to-device key establishment and update authentication, bringing modern protection directly into the sharing and synchronization design.

MystSafe’s strongest advantages over Bitwarden center on greater account privacy, simpler vault custody, master-password-free access, application-layer post-quantum protection, and lower family pricing.

MystSafe requires no separate vault account or email registration and does not keep a permanent central vault database. Your vault stays on your devices, while signed, encrypted updates synchronize through your chosen Google Drive or GitHub storage. You retain control of encrypted storage with no password-manager server to deploy or maintain. MystSafe also eliminates the need to create and remember a separate master password through local device authentication.

MystSafe’s application protocol provides hybrid post-quantum protection for device-to-device key establishment and update authentication. Its permanent free plan makes it easy to get started, and its listed US $19.99 annual Pro plan covers up to seven people, compared with $47.88 annually for six people on Bitwarden Families. Pro includes unlimited active devices and Family Shared secrets.

MystSafe’s strongest advantages over LastPass are greater account privacy, user-controlled vault custody, master-password-free access, and application-layer post-quantum protection. Its architecture reduces dependence on the password-manager vendor.

MystSafe requires no separate vault account or email registration and does not keep a permanent central vault database. Vaults remain on users’ devices, with signed, encrypted updates synchronized through their chosen Google Drive or GitHub storage. MystSafe eliminates the need to create and remember a separate master password, using local device authentication to protect access to independently generated device keys.

MystSafe provides hybrid post-quantum protection for device-to-device key establishment and update authentication within its application protocol. It also offers a permanent free plan and affordable family coverage: its listed US $19.99 annual Pro plan covers up to seven people, with unlimited active devices and Family Shared secrets. Private personal vaults, Family Shared, and Share Once bring personal and family secret management together in one app.

MystSafe’s strongest advantages over Dashlane are greater account privacy, user-controlled vault custody, a permanent free plan, and affordable family coverage. Its architecture reduces dependence on the password-manager vendor by keeping vault access and encrypted storage under users’ control.

MystSafe requires no separate vault account or email registration and does not keep a permanent central vault database. Encrypted vaults remain on trusted devices, with encrypted updates synchronized through your chosen Google Drive or GitHub storage. MystSafe also provides master-password-free access through local device authentication and builds hybrid post-quantum protection into device-to-device key establishment and update authentication.

MystSafe’s Free plan is permanent, while Dashlane no longer offers a free plan. For larger households and more capacity, MystSafe’s listed US $19.99 annual Pro plan covers up to seven people—the owner plus six Family members—with unlimited active devices and Family Shared secrets.

No separate MystSafe vault account, username, or email registration is required to create and use your vault. Your trusted devices establish vault access.

Synchronization uses your selected Google Drive or GitHub account, and Apple handles App Store purchases. Those providers have their own accounts and data practices. MystSafe also operates limited services for functions such as pairing, subscriptions, and Share Once. No vault account does not mean anonymous use or that no service metadata exists.

Use Face ID, Touch ID, a device passcode, or macOS authentication. MystSafe generates cryptographic keys on the device; operating-system protection and local authentication control access to them. Your biometrics are not used as cryptographic keys, and you do not create a separate vault master password.

Plan for recovery by keeping another Active trusted device or a usable vault export. MystSafe has no account password to reset if every trusted device is lost.

Your encrypted vault stays on your trusted devices. Your chosen Google Drive or GitHub storage carries signed, encrypted update blocks. MystSafe does not maintain a permanent central vault database. The storage provider does not receive the keys needed to decrypt vault payloads, though it can process account and service metadata.

Each connected vault uses one selected provider. Google Drive and GitHub are independent methods; there is no automatic fallback between them or automatic migration of the same vault identity.

MystSafe combines ML-KEM-768 with ephemeral P-256 ECDH for device-to-device key establishment, and ML-DSA-65 with ECDSA P-256 for update authentication. Protected updates must pass both signature paths. AES-256-GCM encrypts secret payloads.

These protections operate inside the application protocol. Post-quantum TLS protects a network connection, which is a different layer. Algorithm choices alone do not establish the security of an entire product; device protection, implementation, authentication, and recovery also matter. Free and Pro use the same security-critical cryptography.

No. Free and Pro receive the same security-critical cryptography and security updates. Pro pays for more active devices, more Family members, Family Shared capacity, Share Once capacity and controls, and premium support.

You can access existing vault data stored on an unlocked trusted device while offline. An internet connection is needed to exchange updates with your selected provider and to complete operations that depend on other devices or services. An offline device may not yet have changes made elsewhere.

Pair the new device from an existing Active trusted device using a short-lived QR code and a five-word comparison. Confirm that the words match before approving. Adding an iPhone or iPad uses its scanner; adding a Mac uses the QR code displayed on the joining Mac. Mac-to-Mac pairing is not supported.

For a replacement, first make sure another trusted device has current vault data. Removed or revoked devices do not consume the Free active-device allowance.

Another Active trusted device can pair a replacement, and a usable vault export can be imported. Without another trusted device or a usable export, MystSafe cannot recover your decrypted vault contents.

Signing in to Google Drive or GitHub and using Restore Purchases do not restore vault contents or keys. Keep a recovery path available before you lose access: a current trusted device and a usable export stored somewhere you can reach independently.

An active trusted MystSafe device. Removed or revoked devices do not consume the Free active-device allowance, and you may replace devices without buying Pro.

MystSafe advertises US pricing of $19.99 annually or $2.99 monthly. Pro includes the owner plus up to six Family members—seven people total—with unlimited active devices and Family Shared secrets. Free remains a permanent plan.

The App Store displays the final localized price and billing terms for your region. Pro auto-renews until canceled. Check the Get MystSafe page for public app availability.

No. MystSafe Free is a permanent plan, not a timed trial.

Yes, for your own individual professional or work use.

You keep Pro through the paid-through date. A downgrade does not delete or hide existing personal or Family Shared secrets, remove existing members or devices, or erase a vault. While a Family Plan is at or above a Free limit, MystSafe blocks the corresponding new member, device, or shared-secret creation until capacity is available or Pro is restored.

Pro covers supported MystSafe versions on your iPhone, iPad, and Mac through Apple purchase restoration and linked MystSafe device behavior.

Pro includes an in-app Family Plan for up to 6 Family members, excluding the owner. Small teams can adapt the Family Plan to share secrets when its roles and limits fit, but it is not an Enterprise plan and does not include employee provisioning, organization-wide administration, audit controls, enterprise recovery, or a service-level agreement.

No. Every participant keeps a separate personal vault. The owner cannot open a member’s private vault, and members cannot open the owner’s or one another’s private vaults.

Every active participant, including a member added later while the secret remains in Family Shared. Family Shared is shared with the whole family; it does not offer per-secret recipient selection.

No. Enrollment uses a QR code and five-word verification. Family Shared then uses the Google Drive or GitHub provider selected by the owner without asking each member to sign in to that provider account.

Removal blocks future Family Shared access through compliant MystSafe apps and clears local shared state after the removal is processed. It cannot erase information the former member already revealed, copied, saved, photographed, or otherwise retained.

One valid recipient can claim the share through the protocol, and that recipient can copy, photograph, screen-capture, or otherwise retain the revealed information.

No. The recipient can open the complete link and choose View securely in browser without installing MystSafe. MystSafe is optional if they want to copy the secret into the app and save it to a vault. Merely loading or previewing the page does not claim the share.

The Free weekly allowance resets Monday at 00:00 UTC. MystSafe interfaces will display the local equivalent. Pro has no Share Once creation limit.