100,000+ downloads on Google Play
UltraPass creates strong passwords in one tap, exactly to your rules. No ads, no tracking.
Try it: the phone here actually works.
eYwtae(VRr@u§#
#!U_UwdDr6[FZt
wImNFSx=D(G?4/
Tap a profile to load its options.
Still empty. Copy a password and it lands here automatically.
Demo only: nothing is saved or sent.
Features
Every website has different rules. In UltraPass you set what’s allowed and get three matching suggestions at once.
Length from 4 to 256 characters, lowercase and uppercase letters, numbers, special characters. If a website forbids a certain character, switch off exactly that one. Sliders set how many characters of each kind appear.
Syllables instead of character soup: easier to type and to read out (say, for the guest Wi-Fi).
e.g.#eRavuKoti58
Leaves out characters that are easily mixed up. No more guessing between 0 and O.
Save settings as a profile and switch in a flash: one for online banking, one for Wi-Fi.
Typing a password on your TV? “Enlarge” shows it big, in groups of four. Or move it to another device via QR code.
Copied passwords land in the password list automatically: with a note, tags and search. Encrypted on your device, optionally protected with a PIN, Face ID or fingerprint.
Hx7#qT…#Muvaro…p9_Ld2…No banners, no analytics.
0ads.
trackers.
Back up profiles and password list as an encrypted file and take them to your new phone.
Follows your system or stays the way you like it.
Security
When a database of passwords is stolen, attackers try combinations offline as fast as their machines allow. We assume 100 billion guesses per second.
123456
Tops every list of leaked passwords
Summer2024!
Word + year + symbol: attackers try this pattern first
randomly generated
8 random characters
randomly generated
10 random characters
randomly generated
14 random characters: UltraPass’s default setting
randomly generated
20 random characters
Rough estimate for an offline attack on fast password hashes: on average, the password is found after half of all possibilities. Good services store passwords with slow algorithms, so it takes longer there. No length protects against phishing or a reused password: use a different one for every account.
01
Every extra character multiplies the attacker’s work. 14 characters are a good start, 16 or more are better.
02
Names, years and a “!” at the end are known to every cracking tool. Randomly generated characters are not.
03
If one service gets hacked, all your other accounts stay safe. The password list helps you keep track.
Pricing
The app with all generator features, profiles and the password list costs nothing. Only the optional cloud sync add-on is paid.
€0
Everything you need for strong passwords.
Subscription or one-time
For anyone who needs their passwords on several devices. Currently available in the Android app.
Google Play shows the price in your currency.
Like UltraPass? Use “Give a tip” in the app’s menu to support its development. It’s voluntary and doesn’t unlock anything.
FAQ
Your question isn’t here? Write to me.
The app costs nothing and shows no ads. That includes all generator features, profiles and the password list. Only the optional cloud sync add-on (currently in the Android app) is paid, as a subscription or one-time purchase. A tip is voluntary and doesn’t unlock anything.
No. The password list is stored encrypted on your device. Only if you use the cloud sync add-on is it transmitted encrypted and stored on servers in Germany.
Partly. UltraPass is first and foremost a generator. The password list remembers copied passwords and your own with a note and tags. UltraPass cannot fill in passwords in apps or websites automatically.
In the settings under “Protect password list” you set a five-digit PIN. You can also unlock with Face ID, Touch ID or your fingerprint.
With “Export” you back up profiles and password list in an encrypted file. On the new device, restore it with “Import”.
UltraPass suggests 14 characters by default. That’s a good start. For important accounts like email or online banking, go for 16 to 20. More important than any length: a different password for every account.
The demo runs entirely in your browser and uses its random number generator (Web Crypto). Nothing is sent to a server or stored. For everyday use I still recommend the app: with the password list and its protection.
English, German and Spanish. The app follows your device language.
For Android and iOS. No ads, no tracking.
Scan the QR code with your phone camera and the store opens right away.