KeysWalletWatch
Passwords, cards, documents, API keys and the rest of your secrets — in one encrypted vault on your PC. Sync it to your other devices and share projects with your team, and nobody but you can ever read it. Not even us.
Keys. Wallet. Watch.
Three things a password manager should do, and the reason this one has the name it has.
Keys
Logins, passkeys, recovery codes — and for developers, API keys, secrets, SSH keys, certificates, database credentials and whole .env files, organised into projects with environments and expiry dates.
Wallet
Cards, IDs, licenses, the documents you keep having to find. People and categories so the family's things stay sorted. Notes-only entries for everything that is not a login.
Watch
A security dashboard with a health score: weak, reused and ageing passwords, secrets about to expire, and a breach check against Have I Been Pwned that never sends your password anywhere.
Built the Way a Vault Should Be
Your master password never leaves your PC. Everything else follows from that.
Encrypted on Your PC
Argon2 turns your master password into the key; AES-256-GCM seals the vault. The file is yours — keep it in Documents, on a USB stick, or in your own Dropbox.
Sync That Can't Read You
Optional. The relay stores ciphertext and a version number, nothing else. Every save uploads; a password changed on one device works on the next at first try; conflicts merge entry by entry, never lost.
Share Projects, Not Vaults
Invite someone to a project with a code, read the fingerprint aloud to be sure, give them editor or viewer. Per-project keys, delivered end-to-end encrypted; revoke someone and the key rotates.
Developer Mode
Entry types for API keys, secrets, environment variables, SSH keys, certificates, tokens and endpoints. Paste a .env in; export one per project and environment. Expiring secrets show up on the dashboard.
Security Dashboard
One score for the whole vault. Duplicate and weak passwords, credential age warnings you set yourself, breach checks, and a password history on every entry so a change is never a loss.
Starts Simple, Grows on Request
A guided wizard sets up a vault in a minute with just what you need. Folders, projects, developer types, people and custom categories switch on when you ask for them, not before.
Buy Once. Yours Forever.
$24.99 one-time for up to five computers, every update included. Sync is optional and prepaid — no subscription anywhere.
One payment, yours forever, on up to five computers. Every update included.
- Secure checkout by Stripe
- Key by email within a minute
- 14-day refunds, no questions
Optional: sync across your devices
Prepaid passes, one payment — pick how many years at checkout (1–10). Attaches to the license under the email you pay with; nothing to enter. Every trial includes sync for 2 vaults, so you can try it before you buy.
Not sure yet? Download the free 30-day trial — everything unlocked, sync for 2 vaults included, no card.
Built With
Frequently Asked Questions
How does the free trial work?
Install KeysWalletWatch and use it. For 30 days everything is unlocked — vaults, developer entries, sharing, and cloud sync for two vaults. When it runs out, your vault stays readable forever; only editing waits for a key. No card, no account. One trial per PC.
What does it cost?
A one-time $24.99. No subscription. One key covers up to five computers, and you can move seats between machines yourself from the app or from your license page.
Is it really mine forever?
Yes. The license never expires and every update we ever release is included. Nothing to renew.
What is a sync pass, and do I need one?
Only if you want the same vault on more than one device. Sync is an optional prepaid pass — $12 a year for up to 2 vaults, $24 for 6 (Family), $48 for 15 (Team) — paid once for as many years as you choose. Without it, KeysWalletWatch is a complete, offline password manager on one PC. Your trial includes sync for 2 vaults so you can see it work first.
Can Beckham Enterprises read my passwords?
No. Your vault is encrypted on your PC with a key derived from your master password (Argon2 + AES-256-GCM). The sync relay only ever stores ciphertext and version numbers — it holds nothing that can decrypt a vault, and neither do we. Shared projects use per-project keys delivered end-to-end encrypted to each member.
What happens if I forget my master password?
There is no reset — that is the point of the design. Set up the recovery key when the wizard offers it and keep it somewhere safe; it is the only other way in.
Does it need the internet?
Only for two moments: getting your key in the first place, and signing a PC out so another can use the seat — plus sync, if you use it. A licensed PC that never goes online again keeps working. Nothing in the vault leaves the machine unencrypted.
Can I import from my browser or another manager?
Yes — browser password exports and CSV files import directly, and there is a guide for removing the copies your browser kept afterwards.
Is there a phone app?
Not yet. The desktop app and the sync relay were designed for one, and it is next on the list.
Download KeysWalletWatch
Free 30-day trial — everything unlocked; afterwards your vault stays readable and editing waits for a key.
Download v1.4.0 for Windows Requirements: Windows 10 or later (64-bit) · 6.6 MB
No admin rights required · Signed by Beckham Enterprises, LLC
Manage your license and devices
Rolling It Out to a Team?
Team Sync covers fifteen vaults and shared projects out of the box. Need more seats, a purchase order, or a self-hosted relay on your own Cloudflare account? We build that too.
Talk to Us