My Passwords Review 2025: A Cybersecurity Expert‘s Perspective

Choosing a password manager is a crucial decision for protecting your digital life. With so many options on the market, it can be tough to tell which ones are actually secure and worth your trust.

In this in-depth review, I‘ll share my perspective as a cybersecurity expert on My Passwords, a popular offline password manager. I‘ll dive into the technical details of its security model, compare it to other leading password managers, and help you decide whether it‘s the right fit for your needs.

How My Passwords Keeps Your Data Secure

At the heart of My Passwords‘ approach to security is local encrypted storage. When you create your vault, the app generates a random 256-bit encryption key, which is used to encrypt all of your passwords and other data using the AES-256 algorithm.[^1]

AES-256 is a powerful symmetric encryption standard that has never been broken in the real world. It‘s used by militaries, banks, and other organizations to protect their most sensitive data.[^2]

Your master password acts as a second layer of encryption for your vault. When you enter it, My Passwords uses PBKDF2 to derive a 512-bit key from your master password, which is then used to encrypt your AES key.^3 This process, known as key stretching, makes it much harder for attackers to brute-force your master password.

My Passwords also uses a secure token system to protect your master password. When you log in, the app generates a random token that is used to encrypt your vault key. This token is then encrypted with your master password and stored in the iOS keychain.[^4]

By using a new token for each login, My Passwords ensures that even if an attacker somehow stole your encrypted vault and token, they would still need your master password to decrypt everything. And since the token is stored in the secure enclave, it‘s extremely difficult to extract even from a jailbroken device.

The Pros and Cons of Offline Password Managers

My Passwords‘ focus on local encryption has some major security benefits. Since your vault never leaves your device unencrypted, you don‘t have to worry about the company being hacked or a rogue employee snooping on your data. You also retain full control over your data and can use the app even without an internet connection.

However, this approach also comes with some trade-offs. If you lose your device or forget your master password, there‘s no way to recover your vault.[^5] You‘ll need to start over from scratch, which could be devastating if you rely on your password manager to store other important data like credit cards or secure notes.

Offline password managers are also inherently less convenient than their cloud-based counterparts. Without the ability to automatically sync your vault across devices, you‘ll need to manually export and import your data any time you want to access it on a new phone or computer.

So while My Passwords‘ local-only approach does provide some added security, it‘s important to understand the risks and limitations before committing to it as your primary password manager. I generally recommend cloud-based password managers for most users since they offer a better balance of security and convenience.

How My Passwords Compares to the Competition

To see how My Passwords stacks up against other popular password managers, I compiled data on the key features and pricing of 10 leading apps. Here‘s how they compare:

Password Manager	Free Version	Cross-Device Sync	2FA	Secure Sharing	Breach Monitoring	Price
1Password	No	Yes	Yes	Yes	Yes	$2.99/month
Dashlane	Yes	Yes	Yes	Yes	Yes	$4.99/month
LastPass	Yes	Yes	Yes	Yes	Yes	$3.00/month
Keeper	No	Yes	Yes	Yes	Yes	$2.91/month
RoboForm	Yes	Yes	Yes	Yes	No	$1.16/month
NordPass	Yes	Yes	Yes	Yes	Yes	$1.49/month
Bitwarden	Yes	Yes	Yes	Yes	No	$10.00/year
Enpass	Yes	No	No	No	No	$11.99/year
Sticky Password	Yes	Yes	Yes	Yes	No	$29.99/year
My Passwords	Yes	No	No	No	No	$9.99 one-time

As you can see, My Passwords is one of the only paid password managers that doesn‘t offer cross-device syncing or two-factor authentication. It‘s also missing some increasingly common features like secure password sharing and data breach monitoring.

However, it‘s by far the cheapest option, with a one-time fee of $9.99 for lifetime access to premium features. Most other paid password managers charge monthly or annual subscription fees that can add up over time.

So if you‘re on a tight budget and don‘t mind sacrificing some convenience features, My Passwords could be a good value. Just keep in mind that you‘ll need to be extra diligent about backing up your vault and protecting your master password since there‘s no recovery option if you lose them.

Is My Passwords Right for You?

Now that we‘ve taken a deep dive into My Passwords‘ security model and compared it to other popular password managers, let‘s revisit the key question: is it the right choice for you?

As a cybersecurity expert, I think My Passwords can be a solid option for certain types of users. If you‘re primarily concerned about protecting your passwords from remote attackers and data breaches, the local encryption model provides some added peace of mind.

My Passwords is also a good fit if you‘re looking for a simple, no-frills password manager without a lot of extra features. The app is easy to use and doesn‘t require any technical know-how to set up. And if you only need to manage passwords on a single device, the lack of syncing won‘t be a major issue.

However, I would hesitate to recommend My Passwords for users with more complex security needs. If you regularly need to share passwords with family members or coworkers, for example, the lack of a secure sharing feature could be a dealbreaker. Similarly, if you want the added protection of two-factor authentication or the convenience of automatically filling passwords in your browser, you‘ll need to look elsewhere.

I also wouldn‘t recommend My Passwords for less tech-savvy users who might be more likely to forget their master password or lose their device. Without any recovery options, the stakes are simply too high.

Ultimately, the best password manager for you depends on your unique needs and threat model. If you prioritize security above all else and don‘t mind sacrificing some convenience, My Passwords could be a good choice. But for most users, I believe that cloud-based password managers offer a better balance of security, convenience, and recoverability.

The Bottom Line

In a world where data breaches are increasingly common, using a password manager is one of the most important steps you can take to protect your online accounts. And while no password manager is perfect, My Passwords offers a strong security foundation with its local encryption model and AES-256 encryption.

However, the app‘s lack of cross-device syncing, two-factor authentication, and other premium features may be a dealbreaker for some users. And its offline-only approach comes with some inherent risks and limitations that are important to understand before committing to it.

If you‘re looking for a simple, secure password manager for a single device and don‘t mind sacrificing some convenience for added peace of mind, My Passwords is definitely worth considering – especially given its affordable one-time pricing.

But if you need to manage passwords across multiple devices or want more robust security features like 2FA and secure sharing, you‘re probably better off with a cloud-based password manager like 1Password or Dashlane. These apps may cost a bit more, but in my opinion, the added convenience and security are well worth the price.

Ultimately, the most important thing is to use a password manager that you trust and that fits your individual needs. By taking the time to research your options and understand the trade-offs, you can make an informed decision and take a big step towards securing your digital life.

[^1]: My Passwords Security Whitepaper
[^2]: AES Encryption

[^4]: iOS Keychain Services
[^5]: My Passwords FAQ