Bolt · Password manager

A password manager for the AI era.

Bolt keeps your logins and passkeys in an encrypted vault on your device, fills them where you sign in, and warns you before a password or key goes to an AI tool. Free, with no account.

Download Bolt, free How it is protected →
Master password Touch ID on Mac Passkeys 1Password and Bitwarden Send a secret once

Protection

How is the vault protected?

Your logins are kept on your device, encrypted under a master password only you know.

Master password
Saved logins are encrypted under your master password. It must be at least twelve characters and not one of the passwords attackers try first. Each guess at it costs a 64 MiB Argon2id derivation.
A key of its own
The vault is protected by its own key, separate from the key that protects Secure Sync.
Touch ID
On a Mac with a master password set, Touch ID unlocks the vault after you enter the master password once. After a restart, or once the session length has passed, Bolt asks for the master password again. Adding or removing a fingerprint turns Touch ID unlock off until you turn it on again.
Locks itself
The vault locks when idle. Unlocking with a PIN is rate-limited, and a forgotten PIN is recovered through your device sign-in.
Asks only when you act
Bolt asks you to confirm it's you only for something you pressed yourself, never for a background check or a request made by a web page.
Undo a bad change
Bolt keeps the previous password for a login on this device for a short time, so you can restore it if a change goes wrong.

Signing in

Where does Bolt fill my passwords?

In Bolt's built-in browser and, through the Bolt browser extension, in your own browser, on macOS and Windows.

One sign-in dialog
Open Bolt on a sign-in page to see the logins and passkeys you have for that site. Arrow keys choose, Enter fills, Shift+Enter fills and signs in. A short note on the page confirms what happened.
The right site
A login belongs to its whole site, so it is offered on that site's other addresses, while sites that only share a hosting provider are kept apart. A look-alike site is refused before anything is filled. Bolt also fills on localhost and on company addresses.
Saving and updating
Bolt offers to save a login after a successful sign-in, including two-step sign-ins and redirects within the site, and offers to update it when you change a password. A login you did not save waits in Bolt for an hour.
Emailed codes
Bolt fills a sign-in code that arrives by email, and waits about a minute for one that has not arrived yet.
Paired browsers
A browser paired with Bolt needs your consent for each saved login it fills or reveals.
Linux
The Bolt browser extension and built-in browser are not yet available on Linux.

Passkeys

Does Bolt support passkeys?

Yes. Bolt saves passkeys you create on websites, in the extension and in its own browser, and signs you in with them.

Choose the account
When a site has more than one passkey saved, Bolt lists them by account and asks which one to use. A single passkey is named too, so you always see which account you are signing in to.
On this device
Passkeys saved in Bolt stay on the device where you saved them. They do not sync between devices yet.

Your current vault

Can I keep using 1Password or Bitwarden?

Yes. Bolt works with the vault you already have rather than asking you to move.

Search and fill
Find and fill logins from 1Password and Bitwarden alongside Bolt's own.
Add, edit, update
Add, edit and delete items, and update and re-save logins kept in 1Password or Bitwarden, from Bolt. Read-only vaults say so.
Unlock Bitwarden
Turn on Bitwarden unlock in Settings to unlock it without leaving Bolt. It is off until you turn it on, Bolt never stores the password, and your company can turn it off.

For the AI era

How does Bolt keep passwords out of AI tools?

A password manager stores secrets. Bolt also notices when one is about to be sent to an AI.

AI sites
On ChatGPT, Gemini and other AI sites, Bolt checks what you type, paste or attach and warns you about clear secrets such as keys and passwords. Under a company policy it can mask or block them. Details at /features.
AI web search
Before an AI web search sends text that looks like a password or key, Bolt asks you first.
Coding agents
Claude Code started from Bolt goes through Bolt's masking on your computer: secrets you paste are replaced before they reach the model and restored for the commands it runs. Details at /agent-gateway.
Clipboard
Copying a sensitive item does not add it to clipboard history, and copying a result copies the real value, never the masked text.
Send a secret once
Send a password or secret through a link that works a single time, instead of pasting it into chat or email.

For companies

What can IT control?

Vault settings are part of Bolt's device policy, set through MDM on macOS and Group Policy on Windows.

Lock rules
Set the vault auto-lock time, require a PIN, and turn off Touch ID unlock. Enforced settings show as managed in the app.
Devices
When a device is retired, marked as not meeting the company's rules, removed from management, or offline longer than allowed, Bolt locks the vault and pauses sync there, and the unlock screen says what happened and what to do.
Leavers
Admins can end every session and device a person has, and an identity provider that deactivates a user ends that person's sessions, devices and paired apps.
Deployment
Profiles and templates at /trust/managed-deployment.

FAQ

Questions?

Is Bolt a password manager?

Yes. Bolt has its own vault for logins and passkeys, encrypted under your master password, and fills them in its built-in browser and in your browser through the Bolt extension. It also works with 1Password and Bitwarden.

Is Bolt's password manager free?

Yes. The Bolt desktop app is free for individuals, with no account needed.

Does Bolt unlock with Touch ID?

Yes, on a Mac with a master password set. After you enter the master password once, Touch ID unlocks the vault until your session ends. Your company can turn it off.

Do passkeys sync between devices?

Not yet. Passkeys saved in Bolt stay on the device where you saved them.

Does Bolt stop me pasting a password into ChatGPT?

Bolt warns you when what you type, paste or attach on an AI site contains a clear secret such as a key or password. If your company's policy says Mask or Block, Bolt masks it or stops the send.

Your passwords, kept on your device.

Download Bolt, set a master password, and bring your 1Password or Bitwarden vault along.

Download Bolt All Bolt features →