Veloda Pass

Veloda Pass

Your passwords, encrypted on your own phone before they ever leave it — zero-knowledge, so not even we can read them.

What Veloda Pass does

A password manager built around one promise: what you save is yours, and nobody else can read it — not other users, not us, not anyone with access to our servers.

Zero-knowledge encryption

Every item is encrypted on your phone, with a key made from your master password, before it is sent anywhere. The master password never leaves your phone; we store only what we cannot read.

Autofill that checks the address

Fills your logins in apps and in browsers, and only where they belong: a login is offered on the exact site or app it was saved for, not on a look-alike.

Recovery Key

Shown once when you create the account. If you forget the master password it is the way back in — there is no e-mail reset that someone else could set off.

Two-step sign-in

Add six digits from an authenticator app whenever a new device signs in, with backup codes for a lost phone.

Built-in authenticator

Keep the two-step keys of your other accounts beside their passwords and read all their codes in one place.

Password health

Finds weak and reused passwords, and checks for leaked ones without a password ever leaving your phone.

More than passwords

Secure notes, payment cards, identities and Wi-Fi networks, and passkeys on phones that support them.

All your devices

Sign a new device in by scanning a QR code. Everything stays in step, and keeps working when there is no connection.

Import and export

Bring your logins in from a CSV file of NordPass, Chrome, Bitwarden, 1Password and others, and take an encrypted backup out whenever you like.

Emergency access

Name up to five people you trust. If one of them asks, you get an e-mail and a waiting time of your choosing starts; unless you refuse, they can then read your vault, never change it.

No tracking

No ads, no analytics, no crash reporting. A page inside the app lists every place it connects to.

Download Veloda Pass

Available on Android and Windows.

Android Version 1.4.1 · 5.6 MB · Works on every Android phone (Android 8 and newer)
Download APK

SHA-256 efe4d6dcfd19f3e60b60d016fe09a0d5aa96720142bd983ceca47e15889cb375

Moving up from 1.0.0 or a test build? Uninstall it first, then install this one and sign in: everything you saved comes back from your account. From 1.0.1 on, updates install over each other.

Installing. Your phone may ask you to allow installing from the browser, and Google Play Protect may say it has not seen an app from this developer before. That is its usual notice for apps downloaded outside Google Play: tap “More details”, then “Install anyway”. To be sure the file is ours, compare its SHA-256 with the one above.

Windows Version 1.2.1 · 42.0 MB · Windows 10 and 11, 64-bit
Download for Windows

SHA-256 ad9fa16d1c3a87108242a20c27b0495e1968bd0e521226a975e6d137dddf7d55

Installs for your user account only — no administrator prompt. The vault on the PC is the same encrypted copy as on your phone; the PC can sign in from your phone with a QR code.

Installing. Windows SmartScreen may say it does not know this app yet: our installer is not signed with a paid certificate. Click “More info”, then “Run anyway”. To be sure the file is ours, compare its SHA-256 with the one above.

Veloda Pass is free with every feature for two months. After that a subscription is 60 EGP a month or 400 EGP a year, paid by InstaPay or Vodafone Cash from inside the app. Without one you can still open your vault, copy your user names and passwords, use the passkeys and two-step codes you saved, and export everything; adding, changing, autofill and sync stop. It is also new: it is built the way established password managers are, on standard, well-studied encryption, but it has not yet had an independent security audit — we say so plainly so that you can decide what to trust it with. Because of zero-knowledge encryption, losing both the master password and the Recovery Key means nobody can open the vault, us included. Full wording in our Terms of Service and Privacy Policy.