Offline-First Version 2.0

Your passwords.
Your devices.

WorthyID is a fast, private, cross-platform password manager built on .NET 10 and the Uno Platform. One codebase ships to Windows, macOS, Linux, Android, iOS, and WebAssembly — with no accounts, no servers, and no telemetry.

600KPBKDF2 Iterations
6Platforms
0Servers
Logins
Cards
TOTP
.widsync
AES-256-GCM

Zero knowledge.
Zero compromise.

WorthyID keeps your data encrypted on your own devices — never on our servers, because we don't have any.

Zero Knowledge

Your master password never leaves the device. Only ciphertext is stored locally or in sync files.

No Network by Default

The app does not call home. No analytics, ads, or third-party data SDKs. Ever.

Your Cloud, Not Ours

No subscription sync server. Optional multi-device sync uses a .widsync file in a folder you already sync.

Unlock Your Way

Master password, PIN, swipe pattern, biometrics, or passkey — with rate-limited quick unlock that self-disables on failure.

Everything you store.
Nothing we can read.

SQLite-backed local storage with rich item types, folders, search, and a 30-day recycle bin — all ciphertext on disk.

22 Item Types

Logins, cards, notes, identities, bank accounts, Wi-Fi, passports, licenses, servers, email, databases, SSH keys, crypto wallets, contacts, text threads, and custom types.

Folders & Tags

Organize with configurable folders (Personal by default), tags, favorites, and password history — last 10 changes per item.

Search & Filter

Full-text search across your vault with folder and type filters on the item list.

Recycle Bin

Soft deletes kept for 30 days with tombstones that propagate through optional cloud sync.

Flexible Unlock

Master password plus optional PIN, swipe pattern, biometrics (Face ID, Touch ID, Windows Hello), and passkeys (WebAuthn).

74 Languages

Searchable language picker in Settings with right-to-left support for Arabic, Hebrew, Persian, and Urdu. Theme follows system, light, or dark.

Encrypted Attachments

Attach files to any item — up to 10 MB each, 32 MB per item — stored inside the AES-256-GCM blob. View, share, rename, or remove anytime.

Custom Types & Folders

Define your own item types with custom fields and labels, organize with custom folders and type auto-routing, and move type definitions between devices via CSV.

Built-in power tools.
No extras required.

TOTP codes, password generation, security audits, imports from 18+ managers, device contact & SMS capture, and autofill across apps and browsers.

TOTP / 2FA

Store otpauth:// URIs or base32 secrets. Live RFC 6238 codes with one-tap copy.

Password Generator

Random passwords with charset and length control, plus diceware-style passphrases with entropy estimates.

Security Check-up

Vault health score flagging weak, reused, and stale passwords plus insecure HTTP sites.

Import & Export

Import from 1Password, Bitwarden, LastPass, KeePass, Chrome, Firefox, and 18+ more. Export to Bitwarden JSON, KeePass XML, or CSV.

Autofill

Android Autofill Framework, iOS Credential Provider with QuickType, and Chrome/Edge/Brave via native-messaging host.

Contacts & Messages

Opt-in import of device contacts and (on Android) SMS threads into your encrypted vault — grouped by contact, with call/text/email actions. Read locally, never transmitted.

Backup

Password-protected .widvault encrypted backups plus plain CSV export for portability.

Item Quick-Actions

Call, text, or email a contact — or Remote Desktop / SSH into a server — straight from an item's fields, with no copy-pasting or app-switching.

Help & Feedback

A searchable, fully offline in-app guide library, plus categorized feedback, an About page, and native store rating — no account or support ticket required.

One vault.
Every credential.

22 built-in types — including contacts and archived text threads — plus user-defined custom types with configurable fields, labels, and default extras.

Logins

Usernames, passwords, URLs, TOTP secrets, and custom fields

Credit Cards

Card numbers, CVVs, expiry, and billing details

Secure Notes

Private memos, recovery codes, and secrets

Identities

Personal info, addresses, and government ID details

Bank Accounts

Routing numbers, account details, and IBANs

Wi-Fi

Network names, passwords, and security types

Passports

Passport numbers, expiry dates, and issuing country

Servers

SSH keys, hostnames, ports, and credentials

Contacts

Imported address-book entries with call, text, and email actions

Text Threads

Opt-in SMS conversations archived encrypted on Android

+ 12 more

Email, database, API, SSH key, crypto wallet, passkey, membership & more

Cryptography you can
verify and trust.

A platform-independent crypto engine with SQLite storage. No plaintext titles or usernames on disk — only ciphertext, KDF parameters, and timestamps.

  • PBKDF2-HMAC-SHA512

    600,000 iterations with a random 32-byte salt derive your 256-bit key-encryption key from the master password.

  • AES-256-GCM Per Record

    A random 256-bit vault key encrypts each record's full JSON blob with a fresh 96-bit nonce on every write.

  • Quick Unlock Protectors

    PIN, pattern, biometric, and passkey methods wrap the vault key. Failed attempts are rate-limited and protectors self-disable.

  • Anti-Snooping

    Android FLAG_SECURE blocks screenshots. iOS hides the vault preview in the app switcher. Clipboard auto-clears copied secrets.

1Master password → PBKDF2 600K → KEK
2Vault key wrapped → GCM tag verifies password
3Each record → AES-256-GCM + fresh nonce
4SQLite stores → ciphertext only

Your cloud folder.
Not our server.

Optional bring-your-own-cloud sync writes an encrypted .widsync file to a folder you already sync with Dropbox, Google Drive, OneDrive, or iCloud. (For Android + Windows + iPhone, pick a provider with apps on all three.)

  • No Subscription Server

    We never host your data. The sync file lives in your existing cloud folder — we have zero access to it.

  • Seamless Multi-Device

    Routine sync uses the in-memory vault key — no master password prompt. Join on a new device via the welcome flow.

  • Smart Merge

    Last-writer-wins per item by timestamp. Deletions sync as recycle-bin tombstones. Sync now, stop sync, or sync-on-unlock in Settings.

worthyid.widsync
Magic headerWIDSYNC
KDF metadataPBKDF2-SHA512 · 600K
Wrapped vault keyAES-GCM · master password
PayloadAll items · AES-256-GCM

Stored in your Dropbox, Google Drive, OneDrive, or iCloud folder.

One codebase.
Every platform.

Built with .NET 10 and the Uno Platform — shipping native apps to six targets from a single codebase. Store listings coming soon.

Windows

Native WinUI 3 app with Windows Hello, DPAPI-protected secrets, and Microsoft Store distribution.

Microsoft Store — Coming Soon

macOS

Skia desktop host with iOS Credential Provider extension build support and native macOS integration.

Mac App Store — Coming Soon

Linux

Cross-platform Skia desktop build for popular Linux distributions.

Package — Coming Soon

Android

API 26+ with Autofill Framework, BiometricPrompt, and FLAG_SECURE on sensitive screens.

Google Play — Coming Soon

iOS

Credential Provider extension with QuickType suggestions via App Group–shared vault access.

App Store — Coming Soon

Web

WebAssembly-hosted vault UI with WebAuthn passkey support in the browser.

Web App — Coming Soon
.NET 10 + Uno Platform

Built by Worthy Tech LLC — replacing the legacy UWP app with a modern, platform-independent architecture.

Designed for clarity.
Built for trust.

A glimpse of the WorthyID experience across your devices.

Personal
🔐
GitHub
dev@worthytech.net
💳
Visa •••• 4821
Expires 09/28
📶
Home Wi-Fi
WPA3 · ••••••••
🖥️
prod-server
SSH · port 22
TOTP
🔑
GitHub 2FA
482 193
🔑
AWS Console
719 045
Live RFC 6238 codes
Check-up
⚠️
3 reused passwords
Across 8 logins
📅
2 stale passwords
Older than 1 year
Vault score: 82
Good — 2 issues

Offline-first. Zero knowledge.
No accounts required.

WorthyID is launching soon on Windows, macOS, Linux, Android, iOS, and WebAssembly. Sign up to get notified when it hits the stores.