MoatKey Out nowA password manager for you — and for the accounts your family or team share.
Start with your own vault. When the streaming login, the vendor portal or the two-factor code needs more than one person, share a Castle. Nobody hands over a master password.
Edge: the button opens the Chrome Web Store. Choose Allow extensions from other stores once, then Get. The Edge Add-ons listing is in review.
Free to start. Family plans on Android are billed through Google Play. See plans
One person shouldn't be the only way in
When the whole family's streaming login or the company's vendor portal lives in one person's head or phone, everyone else is locked out the day they're unavailable. MoatKey fixes that.
Castles for every group
A Castle is an encrypted space for accounts. Keep one private, share one with your household and another with your business.
- Everyone keeps their own MoatKey login and master password
- Choose who can view, edit or manage each Castle
- Remove someone and their access goes with them
Shared two-factor codes
Two-factor codes usually live on one person's phone. MoatKey lets the whole Castle see the current code, so a login never waits on whoever has the phone.
- Scan the setup QR code, import a screenshot or type the key
- Codes are generated on each member's own device
- A confirmation step before anything is saved
Strong passwords in one tap
A built-in generator for passwords and passphrases, with the options real websites need.
- Pick the length and character types, or use random words
- Skip look-alike characters and symbols a site rejects
- Made on your device and never stored until you save it
Try it right here. Same options as in the app.
Made in your browser. Nothing is sent or saved.
Designed so we can't read your vault
What MoatKey does today, in plain words. No marketing superlatives.
Your master password stays on your device
Your device turns your master password into a key with Argon2id, a password-hashing method built to make guessing slow and expensive. We never receive the master password.
Encrypted before it leaves
Each login, note and authenticator secret is encrypted on your device (XChaCha20-Poly1305) before it syncs. Our servers store only the encrypted form.
Quantum-safe sharing
When a Castle is shared, its key is sealed for each member with a hybrid of X25519 and ML-KEM-768, the US post-quantum standard (FIPS 203). An attacker would have to break both.
Signed key changes
When someone is removed and a Castle's key changes, the owner signs the change with ML-DSA (FIPS 204). Members' apps refuse a key change the owner didn't sign.
Honest status: MoatKey had an internal security review on October 1, 2026, and its fixes are in the current release. It hasn't had an independent audit yet; we plan one and will say so here when it's done. If you forget your master password and lose your recovery kit, we can't get your data back. More on the MoatKey Security page.
Start free. Upgrade when your group grows.
Free
$0. Personal vault, built-in authenticator, password generator, import, and 1 shared Castle with up to 3 people.
Family
$4.99/month or $49.90/year. Up to 6 people and unlimited shared Castles.
Team
$5 per user/month or $50 per user/year. For businesses. Available in the browser extension (out now for Chrome; Edge is in review). Team for business →
Paid plans renew automatically until you cancel. Cancel any time; it takes effect at the end of the period you've paid for. In the browser, payments are processed by Stripe; on Android, subscriptions are billed and managed by Google Play. See the MoatKey Terms and our Refund Policy.
Start free today
MoatKey is out now on Android and Chrome. Edge is in review, and iPhone is coming. Leave your email and we'll tell you the day each one is out.
ADD TOChrome ADD TOEdge GET IT ONGoogle Play
We'll only email you about MoatKey launches. Unsubscribe anytime. Privacy Policy