Your Passwords.
Your Crypto. Total Control.

What is Gamma Pass?

Gamma Pass is a suite of two calm apps where you own the keys. The password vault (LegendPass) and the crypto wallet (Gamma Pass Wallet) share one promise: encryption happens on your device first. Vault entries are sealed on-device (see the vault spec at legendpassword.com/security: PBKDF2-HMAC-SHA256 at 310,000 iterations, AES-256-CBC + HMAC-SHA256 encrypt-then-MAC, TLS 1.2 minimum) and only ciphertext syncs, so our servers hold data we cannot decrypt — a design choice, not just a policy claim.

The idea came from a simple frustration at GAMMA PASS LLC in Albuquerque, NM (founded May 14, 2026): your passwords lived in one provider’s cloud, your coins in another’s custody, and convenience always meant giving up ownership. We built the two apps we wanted — autofill and breach alerts for logins, 12-chain support for crypto — with zero-knowledge sync so your master secret never leaves your phone or laptop. See Security and Privacy for full details.

Zero-knowledge explained — your device is the source of truth

Zero-knowledge is an architecture where the service literally cannot read your data. In Gamma Pass, your master password never leaves your device; for the LegendPass vault it derives a local key via PBKDF2-HMAC-SHA256 (310,000 iterations) that seals each entry with AES-256-CBC + HMAC-SHA256 (encrypt-then-MAC). Only the resulting ciphertext is synced via TLS (1.2 minimum), so a server breach would still reveal only unreadable blobs. Full vault spec: legendpassword.com/security. On the other hand, hosted models keep a recoverable copy for easy resets — we choose math over access, which means you must back up your recovery kit offline.

How does Gamma Pass protect your data?

Set up takes about three minutes — pick your apps, create one strong master secret, and carry the vaults everywhere with end-to-end encrypted sync.

1. On your device — your master secret derives a local vault key (PBKDF2-HMAC-SHA256, 310,000 iterations) that never leaves your phone or laptop. See vault spec.
2. Encrypted locally — every password is sealed with AES-256-CBC + HMAC-SHA256 (encrypt-then-MAC) before it moves.
3. Synced as ciphertext — we store only an unreadable blob via TLS (1.2 minimum); even we cannot decrypt it.

Everything secured, nothing exposed.

• Password vault: Autofill, breach alerts, and one-tap generation for every login across 1 device on Free or unlimited devices on Plus.
• Crypto wallet: Self-custody across 12 chains — you sign every transaction, keys stay on device, NFT gallery included.
• Biometric unlock: Face or touch to open; your master secret stays in your head, not on a server.
• Secure sharing: Share a login or address without revealing the underlying secret.
• Instant sync: End-to-end encrypted across desktop, mobile and browser extensions.
• Zero-knowledge by design: We architect so we cannot read your vault, even if compelled.

How does LegendPass compare?

Gamma Pass is the company and suite hub. The detailed, maintained password-manager comparison lives on the product site: legendpassword.com/password-manager-comparison. In short: LegendPass offers on-device biometrics (face, palm, gesture, fingerprint where supported), browser autofill, and a free plan with unlimited passwords — see vault pricing and our security model.

Calm pricing, no surprises.

Each app bills separately, so you pay only for what you use. All plans — even Free — are zero-knowledge by default. See full suite plans at Pricing. Note: the standalone LegendPass vault app also offers its own Premium plan at legendpassword.com/pricing ($9.99/month or $69.99/year) — suite plans below are separate.

Data as of September 3, 2026. Prices in USD. See Pricing and Terms for billing details.

What the vault and wallet handle

Gamma Pass is built for clear coverage. The wallet supports 12 distinct chains (Ethereum, Bitcoin, Solana and 9 more) while the vault stores unlimited logins with AES-256-CBC + HMAC-SHA256 and PBKDF2 key derivation. See the vault security spec for details.

Self-custody explained — you sign, not a platform

Self-custody means your private keys live with you, not on our servers. When you create Gamma Pass Wallet, the seed is generated locally via OS randomness and displayed once for you to write down; we never transmit or store it. Every send is signed on-device and broadcast as a signed transaction over TLS, while we route only the signed bytes. This aligns with NIST isolation principles and is the opposite of custodial models where an exchange holds keys and can freeze funds. On the other hand, self-custody makes you responsible for backups — lose the kit and even we cannot recover funds, as stated in Terms and Privacy.

Frequently asked questions

What is the best password manager in 2026?

The best keeps you in control — LegendPass is zero-knowledge, so your vault is encrypted on device and we cannot read it. Autofill, generate, and sync end-to-end encrypted. Try free at legendpassword.com.

Is LegendPass safe and what is zero-knowledge?

Yes. Zero-knowledge means your master password never leaves your device. For the vault it derives a local PBKDF2 key (310,000 iterations) that seals logins with AES-256-CBC + HMAC before any sync. Only ciphertext leaves. See vault spec.

Can I import passwords from Chrome, 1Password or Bitwarden?

Yes — import CSV from Chrome, 1Password, Bitwarden and others in one tap. Duplicates are merged and weak passwords flagged instantly.

What is a self-custody wallet and does it support Bitcoin, Ethereum and Solana?

Self-custody means you hold the private keys, not an exchange. Gamma Wallet supports 12 chains including Bitcoin, Ethereum and Solana — you sign every transaction on device.

What happens if I forget my master password or seed phrase?

Use the offline recovery kit saved at setup. Without it, even we cannot restore vault or funds — that is zero-knowledge. Keep two offline copies. See Security.

How much does it cost and how do I get started?

Both apps start free. Plus $4/mo yearly and Pro $5/mo yearly at legendpassword.com/pricing. Get started at legendpassword.com/download in under a minute.

Key terms

Zero-knowledge

An architecture where the service provider cannot decrypt user data because the key never leaves the user's device.

Self-custody

You — not a platform — hold the private keys that control your crypto assets.

AES-256

Advanced Encryption Standard with 256-bit keys — the symmetric cipher used to seal your vault locally.

PBKDF2

Key-derivation function used by the LegendPass vault (PBKDF2-HMAC-SHA256, 310,000 iterations) to turn your master password into an encryption key. See vault spec.

How vault key derivation works (see vault spec)

// Vault model (simplified — see https://legendpassword.com/security)
const key = await pbkdf2(masterPassword, salt, { hash: 'SHA-256', iterations: 310000 });
const vault = await aes256CbcHmacEncrypt(JSON.stringify(entries), key);
// Only ciphertext is synced

“The best way to protect data you shouldn’t be able to see is to make the math prevent you from seeing it.”

— Gamma Pass security model, reviewed September 3, 2026

More Q&A

Key Takeaways — TL;DR

• Two apps, one promise: vault for logins + wallet for 12 chains — you own the keys to both.
• Zero-knowledge by math: vault PBKDF2 + AES-256-CBC/HMAC on device, TLS in transit, ciphertext-only sync — 0 keys visible server-side.
• Free to start: $0 for both suite apps; Plus $4 and Pro $5 per month yearly (suite plans; vault standalone Premium is separate).
• Ownership has trade-offs: you must back up the offline recovery kit — we cannot recover it for you, per Terms.

You should start with one app this week and verify autofill or a test transaction — full setup is under 10 minutes.

Conclusion — our verdict and the other perspective

Conclusion: if your top priority is “you own the keys, you own the data,” Gamma Pass is the calmer choice. Both apps keep encryption on device, use NIST-reviewed primitives, and bill separately at $0 to start, so you pay only for what you use. On the other hand, if you value one-click provider recovery over self-custody, a hosted manager or custodial wallet may feel easier — at the cost of trusting a third party with your secrets. Whichever you choose, back up your recovery kit offline and review Privacy and Contact before you commit.

Published by Gamma Pass Team (Security & product, GAMMA PASS LLC) · September 3, 2026 · Albuquerque, NM · 12-chain coverage.