How can we help?
Start with the common questions below. If yours is not there, send us a message — we read every one.
What exactly is encrypted?
Passwords, notes, password history and generated passwords are encrypted with AES-256-GCM. Personal documents and their photos are encrypted with AES-256-GCM under a separate key. Both keys are kept in your device’s secure storage — the iOS Keychain or the Android Keystore.
Titles, usernames, website addresses, categories and settings are stored without encryption so you can search them. Everything stays on your device either way.
How do backups work?
When you export a backup, Pass Card encrypts the file with AES-256-GCM using a password you choose (the key is derived from it with PBKDF2). The file is saved or shared wherever you choose; we never receive it.
To restore, import the file into Pass Card and enter the same backup password.
I forgot my backup password. Can you recover it?
No. Only someone who knows the password can open the backup, and that includes us — we cannot recover a forgotten backup password, and without it the backup cannot be opened.
If you can still open Pass Card on your phone, export a fresh backup with a new password you will remember, and keep it somewhere safe.
I used Vault It. How do I move to Pass Card?
Pass Card is the new name of Vault It. To bring your data across, export a backup from Vault It, then install Pass Card and import that backup file.
Keep the backup file (and its password, if you set one) until you have checked that everything arrived.
How does iCloud sync work?
iCloud sync is optional and available on iOS only. When you turn it on, an encrypted copy of your vault is saved in your own iCloud Drive. It is encrypted with AES-256-GCM using a key kept in your iCloud Keychain, so it lives in your iCloud account, not with us — we cannot read it. You can turn sync off at any time.
On Android, use password-protected backup files to move or keep a copy of your vault.
I forgot my app passcode. What can I do?
Pass Card has no account and no servers, so there is no “reset by email” — we cannot recover a forgotten passcode. Choose a passcode you will remember and keep it private.
A recent backup, protected by a password you know, is your safety net if you ever lose access to the app.
Does Pass Card need the internet?
No. Your vault works without an internet connection. The app only goes online to show website icons next to saved logins (only the website’s address, such as github.com, is sent to Google’s icon service), to load ads from Google AdMob in the free version, and when you choose to send a support, bug-report or rating form.
Is Pass Card free?
Yes. Pass Card is free and shows ads from Google AdMob. Ads can be removed with a one-time in-app purchase.
When can I download it?
Pass Card is coming soon to the App Store and Google Play. This page will link to both stores as soon as the app is live.
Send us a message
Found a bug, stuck on a backup, or have an idea? Tell us below — it goes to the same place as the support form inside the app.