Is ICP App Store really free?

Yes. Every app listed is free to open and use. Many are fully open-source. There are no subscriptions, no in-app paywalls, and no ads on the App Store itself.

Do I need a crypto wallet or tokens to use these apps?

No. Most apps sign you in with a passkey (via Internet Identity) — no wallet, no tokens, no seed phrases. A few DeFi apps do need crypto to actually swap or lend, but browsing and signing in is free.

Are these apps private?

Apps built on the Internet Computer run entirely on the Internet Computer. Several use end-to-end encryption and threshold key management (VetKeys) so even the developer can't read your data.

What is the Internet Computer?

A public, public compute network that hosts entire applications — frontend, backend, and data — as smart contracts. Apps are tamper-resistant, globally distributed, and served directly to your browser without traditional cloud servers.

Do I have to install anything?

No. Every app opens in a modern browser with no extensions or downloads. Many work as Progressive Web Apps (PWAs) so you can add them to your phone or desktop for a native-feeling experience.

How is this different from the Apple or Google app store?

Nothing is gatekept by a single company, there are no 30% cut fees, the apps run on public infrastructure rather than someone's private server, and you don't have to install anything.

Is a free password manager less secure than a paid one?

No. Security is a function of the cryptography and the code, not whether a company bills you. Free open-source managers often have better security stories because they\'re publicly audited and widely inspected.

What happens if I lose my passkey?

Register multiple passkeys upfront (phone, laptop, hardware key). Any one of them unlocks the vault. If you lose every registered passkey the vault is unrecoverable — same as losing every copy of a seed phrase. Treat recovery as importantly as a master password.

Can I migrate back if I don\'t like it?

Yes. Export to a standard format (CSV or JSON), re-import to your previous manager. Nothing is locked in.

Does the free tier have fewer features than a paid one?

With freemium-style managers, yes — that\'s the business model. With public-utility managers like Cloak, no paid tier exists; the full feature set is free.

Free password managers (2026 guide)

Which free password manager is actually trustworthy, and how to migrate.

Paid password managers dominate 'best password manager' rankings, because they have marketing budgets and affiliate programmes and free ones mostly do not. Free password managers exist and work perfectly well — they\'re just harder to find and evaluate. Here\'s what to look for and how to migrate.

Why free is possible

Free software generally fits one of three patterns: (1) open source run by volunteers, like Bitwarden's community edition or KeePass; (2) funded as a public utility, like Internet Identity or Cloak on the Internet Computer; or (3) freemium loss leaders, where the free tier is crippled until you pay. Pattern 3 is usually a trap — the free tier gets worse over time. Patterns 1 and 2 are stable. Cloak is pattern 2: your vault is encrypted on your own device, and the key that unlocks it is derived on demand by the Internet Computer's threshold key system, so there is no company server to run, monetize or subpoena.

What to look for

End-to-end encryption is non-negotiable — your vault should be encrypted on your device before it's synced anywhere. Cross-device sync matters too; one device is a single point of failure. Check the recovery story: what happens when you lose your primary device? Passkey-based managers where you register multiple passkeys at signup are far more forgiving than master-password-only managers. Good import support matters because you probably have a vault somewhere else — look for direct import from 1Password (.1pif), LastPass (CSV), Bitwarden (JSON), and browser keychains (Chrome, Safari, Firefox). Finally, prefer open source — public code means serious bugs and backdoors get noticed.

Migration in 15 minutes

The flow is the same everywhere: (1) in your current manager, export your vault to a standard format (CSV or JSON); (2) in the new manager, import that file; (3) spot-check a few items; (4) delete the original vault (keep the export somewhere encrypted as a backup for 30 days); (5) update browser integrations. Cloak supports direct import from 1Password, Bitwarden, LastPass, Chrome, Firefox and Apple Keychain. Dashlane is not on that list, so a Dashlane CSV may need checking against Cloak's import screen before you delete the original.

The specific recommendation

If you want a free, open password manager that doesn't rely on a single company's servers, Cloak is the main option currently. Your vault's encryption key is derived by the Internet Computer network via threshold cryptography — nobody (not even the developer) has the full key. Multi-passkey recovery is built in. If you prefer the self-hosted route, Bitwarden's self-hosted edition is mature and well-audited.

Related apps

Cloak — Encrypted credential storage where passwords are encrypted on your device before they ever leave it.
Internet Identity — Passwordless sign-in for the Internet Computer — a passkey or a provider you already use, with no tracking and no personal data shared.

Frequently asked questions

Is a free password manager less secure than a paid one?: No. Security is a function of the cryptography and the code, not whether a company bills you. Free open-source managers often have better security stories because they\'re publicly audited and widely inspected.
What happens if I lose my passkey?: Register multiple passkeys upfront (phone, laptop, hardware key). Any one of them unlocks the vault. If you lose every registered passkey the vault is unrecoverable — same as losing every copy of a seed phrase. Treat recovery as importantly as a master password.
Can I migrate back if I don\'t like it?: Yes. Export to a standard format (CSV or JSON), re-import to your previous manager. Nothing is locked in.
Does the free tier have fewer features than a paid one?: With freemium-style managers, yes — that\'s the business model. With public-utility managers like Cloak, no paid tier exists; the full feature set is free.