Mac app · macOS 27+
A Mac password manager for you and your AI coding agents.
PassSumo reads and writes the open KDBX 4.x format — the same format used by several other password managers across desktop and mobile. Your vault is one file you keep in iCloud Drive or on local disk. There is no Heaven8 cloud and no account to create.
- Requires
- macOS 27+
- Format
- KDBX 4.x
- Sync
- iCloud Drive, Wi-Fi between your Macs, or a local file
- Account
- None
For AI coding agents
Let your AI agents use your keys, with your approval for each grant.
PassSumo has a built-in local MCP server and a psumo command-line tool. Claude
Code, Cursor, Codex or another AI agent asks for a secret, you approve each grant on your Mac,
and the grant ends on its own. API keys and tokens stay in your vault instead of in a
.env file or a repository. See the step-by-step guide.
Underneath it is an ordinary KDBX vault. Unlock with a master password, or enrol Touch ID as a shortcut once the master password has unlocked the vault at least once. Search across every entry, generate new passwords, read TOTP codes for two-factor accounts, and attach files to an entry. Besides logins, keep a crypto wallet recovery phrase or a payment card in its own entry type. Deleted entries move to a recycle bin inside the vault itself, the same convention other KDBX clients use, so nothing vanishes by surprise.
Encryption is the format's, not ours
The vault payload is encrypted with AES-256 or ChaCha20 under a key derived with Argon2 — that is what the KDBX format itself specifies, applied the same way any compliant KDBX reader or writer would apply it.
Sync is a file, not a service
PassSumo does not run a sync service. Put the .kdbx file in iCloud Drive and every device that can read that folder can open it; keep it on local disk and it stays there.
Wi-Fi sync between your own Macs
Pair another Mac of yours once with a PIN, then open and edit a database it offers over your local network. The connection is encrypted, there is no server in between, and nothing is started until you choose to use it.
Optional site icons
Only when you click, PassSumo downloads the icon from the site in an entry's own address over HTTPS. That site sees your IP address, like any visit. There is no icon service, and nothing reaches us.
Built for interop
Reading and writing the same open format other password managers use is a design requirement, not an afterthought — a vault created elsewhere should open here, and a vault saved here should open elsewhere.
Optional AI agent access
Off by default. When you turn it on for a database, an AI agent can read the folders you allow, and, if you choose, add new entries to them, and every grant is approved by you and ends on its own. Secrets the agent asks for are returned to it. See the step-by-step guide.
Decided, not missing
What PassSumo doesn't do, on purpose.
- NOAutoFill or a browser extension. Both are attack surface. Filling a password into a running browser is not part of v1.
- NOPasskeys. Passkey storage needs a system Credential Provider and there is no settled cross-client convention for storing one in a KDBX file yet.
- NOA Heaven8 cloud, or any sync service of our own. Sync is whatever already moves your .kdbx file — iCloud Drive, a direct Wi-Fi connection between your own Macs, or nothing at all.
- NOAn account or sign-up. Nothing to register, nothing to log into.
None of this is a gap waiting to be filled quietly — it is stated here so it doesn't have to be discovered by its absence.
The system facts
Sandboxed, with nothing to sign into and nothing to leak.
- Requires
- macOS 27 or later
- Distribution
- Mac App Store
- Sandbox
- Apple's App Sandbox
- Account
- None
- Telemetry
- None
There are no ads, no analytics, no telemetry and no third-party SDKs, and your vault never leaves your own devices. PassSumo uses the network only when you ask it to: to sync with your own Macs over your local network, or to download a site's icon when you click. PassSumo is free to use, with no account; an optional subscription, bought through Apple's own purchase infrastructure, unlocks extras such as keeping several databases open at once. Nothing goes to us, and nothing out of your vault goes anywhere else. Detail is in the privacy policy.
More detail
Read the rest, or send a message directly.
The FAQ, the AI agent guide, the support page, the privacy policy and the terms of use cover the rest. The feedback form goes straight to the person who writes the code.