Last Updated: September 2026

Cipher Password Manager ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we handle your data when you use the Cipher desktop application and the accompanying browser extension.


Cipher is built on a "local-first" and "zero-knowledge" architecture. We do not have servers, we do not host your data, and we do not have access to your passwords.

• All data is encrypted and stored locally on your own device.
• We do not collect, transmit, or share any personal information, telemetry, usage statistics, or crash reports.

The Cipher browser extension requires certain permissions (such as activeTab and nativeMessaging) to function:
- nativeMessaging: Used strictly to communicate locally between your browser and the Cipher desktop application installed on your machine.
- activeTab: Used strictly to detect the URL of the current page you are on, in order to fetch the matching credentials from your local vault.

The extension does not track your browsing history or transmit any data over the internet.


Cipher does not integrate with any third-party analytics or tracking services.


Because we do not collect any data, our policy is unlikely to change. However, if we introduce optional cloud-syncing features in the future, this policy will be updated to reflect exactly how that data is handled (which will remain end-to-end encrypted).


If you have any questions or concerns about this Privacy Policy, please open an issue on our project repository.