Repass How it works Pricing Install

Repass

Every password changed. You never type one of them.

Connect Gmail once. Repass finds every account your email has ever touched, resets each password on the site itself, and seals the new one in your vault.

Get Started

Every plan starts with a 3-day free trial. Cancel inside the trial and you pay nothing.

Why this is not a password manager

A manager stores what you type. Repass goes and changes it.

Filing a weak password neatly does not make it a strong one. The passwords worth worrying about are the ones you set years ago and reused — and the only fix is to actually change them, on every site, one at a time. That is the job nobody does. So we automated the job, not the filing.

01

It finds the accounts you forgot you had

Your inbox is the only complete record of your online life. Repass reads it once and builds a ledger of every service that has ever emailed you — including the ones you would never have listed.

02

It resets them on the site itself

Not a stored copy — the real password. Repass opens each site’s own forgot-password flow in your browser, waits for the reset mail, and sets something new. Sites that need a human get handed back to you, one tap, and it carries on.

03

It seals each one where nobody can read it

The new password is encrypted on your device before it goes anywhere, and your vault opens when you sign in — there is no second password to remember. Your master password still works, and still wraps the vault independently, if you would rather hold the only key.

Your ledger

Everything in one list, ordered by what you actually use.

Every account Repass found, what state it is in, and the password itself when you ask for it. Sites you visit most sit at the top — worked out on your own machine, from your own browsing, which never leaves it.

  • Open & Fill types the password into the page rather than putting it on your clipboard, where any other app could read it.
  • Status is a word, not a colour — sealed, ready, manual — so it reads the same to everyone.
The Repass extension showing a list of accounts — Spotify, MacPaw, Reddit, GitHub, Dropbox — each marked sealed, ready or manual, with the selected entry's username, hidden password and website on the right.
The extension, open over any tab.
The password generator with a length slider and character toggles, showing a generated password and a note reading: this site wants 8 to 16 characters, an uppercase letter, a number and no symbols — Repass shortened to 16 and dropped symbols.
The generator, on a site with a 16-character limit.

The generator

It reads the site’s rules before it writes a password.

Length caps, banned symbols, “must contain a number” — Repass takes them off the page itself and builds a password that fits. Where your settings and the site disagree, the site wins, and the panel tells you what it changed instead of quietly ignoring the slider you just moved.

  • Required characters are placed by construction, not generated and hoped for.
  • Every password it has made is kept, encrypted, in case a form eats one.

What we can and cannot see

Encrypted on your device, before it is ours to store.

Every password is generated and encrypted on your machine before it is sent, and what we store is ciphertext and a domain name. So that signing in is enough to open your vault anywhere, we also hold a key that unwraps it — which we would rather state plainly than let you assume otherwise.

Pricing

One plan. Every account you have.

One plan. Repass finds every account your email has and resets each password into your vault.

Monthly
$15/mo
billed monthly

Every feature. No limit on the number of accounts.

AnnualBest value
$140/yr
billed once a year

The same plan, $40 less than paying monthly for a year.

3-day free trial on every plan. Try the full product first — cancel any time inside the trial and you are not charged.

Questions

The things people ask first.

How is this different from a password manager?
A password manager is a filing cabinet: it keeps whatever you put in it, and the weak password you set in 2019 stays weak forever. Repass changes the password first, then files it. You end up in the same place a manager promises, without the weeks of doing it site by site.
Can you see my passwords?
Technically yes, and we would rather say so than let you assume otherwise. Passwords are encrypted on your device, but so that signing in is enough to open your vault on any device, we hold a key that can unwrap it. We do not read vaults and every use of that key is recorded. If you want us not to hold it, ask us to revoke your account key and your master password becomes the only way in — including for you.
Why does it need my Gmail?
Two reasons, both mechanical. Your inbox is how we discover which accounts exist, and the reset link a site emails you is how a reset gets completed. Repass reads mail; it does not send any on your behalf.
What happens when a site asks for a code, or a captcha?
It stops and shows you the page. You solve the one thing only you can solve, press Done, and it picks up where it left off. It never guesses at a challenge meant for a human.
What if I want to stop?
Every credential in your vault is exportable, and the reset ones are ordinary passwords on ordinary sites — they keep working whether or not you keep using Repass. There is nothing to be locked into.

Two minutes now, instead of the afternoon you keep postponing.

Get Started