Coming soon

A password manager for business, out of spreadsheets and chats

Kamzan Pass gathers everyone’s logins in personal and shared vaults. When someone leaves, you know which passwords to change. And one single promise: the server neither receives nor stores the keys.

A password in a shared spreadsheet belongs to whoever opens it

The supplier portal, the bank, the Wi-Fi, social media: in every company these credentials travel through chats, sit in an Excel file or in one person’s head. Until that person leaves.

With Kamzan Pass every login is an entry encrypted on your device before it goes anywhere. You share it with the right people, each with their role, and the browser extension brings it to the page where it’s needed.

What stays on the device and what reaches the server

On your device

  • The master password
  • The keys
  • Names, addresses and passwords in clear

On the server

  • Encrypted text
  • Who belongs to which vault
  • When an entry changes

What you can do with it

  • Entries and generator

    Passwords, secure notes, cards and TOTP codes in one place. The generator creates long passwords in the browser, and your device flags the weak ones.

  • Keys on your device

    Passwords are encrypted and decrypted on your device: the server gets encrypted data. Master password, secret key, devices and what the server knows.

  • Sharing a vault

    Shared vaults with three roles, invitations to check and fingerprints to compare. When someone leaves, the key rotates and passwords stay to change.

  • Browser extension

    Fill passwords from the browser panel, with your own confirmation on the site. The extension is the most protected way to use Kamzan Pass.

  • Company recovery

    Lost master password and code? A company custodian can restore access. Recovery is an access: it stays on record and administrators are notified.

  • When an employee leaves

    When someone leaves, Kamzan Pass lists the entries they could see and passes their vaults to a colleague through recovery, within 30 days.

  • Rules and event log

    Master password, locking and retention: the company decides, above fixed minimums. The log separates what the server attests from what the device declares.

  • Import and export

    Bring passwords from Bitwarden, browsers and Google Authenticator: the file is read on your device. And if you ever want to leave, you can export them.

  • What it doesn’t protect

    One promise: the server neither receives nor stores the keys. Here is what it doesn’t cover, for those deciding. Not yet reviewed by a third party.

We also tell you what it doesn’t protect

A serious IT department asks before choosing a password manager. Company recovery is an access, anyone who has seen a password knows it, the server sees some metadata and a compromised device stays outside what Kamzan Pass can protect. The design has not yet been reviewed by an external cryptographer.

Frequently asked questions

Can the server read my passwords?

Passwords are encrypted and decrypted on your device: the server receives encrypted text and neither receives nor stores the keys. It does see some metadata, such as who belongs to which vault and when an entry changes.

Can the company open my account?

Yes, if it has turned on recovery. Recovery is an access: it’s logged, other administrators are notified, and so are you if you can still sign in. With two-key recovery, two custodians are needed.

What if I forget the master password?

You get back in with your recovery code or, if the company has turned it on, through company recovery. Without either, the data can’t be recovered.

What happens when someone leaves the company?

Kamzan Pass prepares the list of passwords that person could see, so you know which to change. The passwords must really be changed on the sites: anyone who has seen one still knows it.

Which browsers does it work on?

The extension is for Chromium browsers and Firefox, and the vault also opens on the web. The extension is the most protected way to use Kamzan Pass, because the server loads the web vault at each opening.

Has the design been reviewed by outside experts?

Not yet: no external cryptographer has reviewed it. That’s why we present nothing as a third-party verified guarantee, and the limits are written on a dedicated page.

When will it be available?

Kamzan Pass is coming soon and we don’t have a date to share yet. If you’re interested, write to us: we’ll show you where it stands and let you know when it can be activated.