pCloud Pass - Password manager

Opening the pCloud Pass app for the first time presents a clean interface with a single prominent button: "Create Account." The setup asks for an email and a master password. No tutorial pops up. No tour guides you through the features. You are left to figure out the rest on your own. The app immediately pushes you toward importing existing passwords from browsers or other managers like LastPass or Bitwarden. This is a common starting point for password managers, but the execution here feels bare. The import process works, but once your data is inside, the organization stops. There are no folders. No subfolders. Just a flat list of entries. Tags exist, but they do not replace the need for proper categorization. One user described it as "very basic" and noted the lack of favicons or logos, making it hard to quickly identify sites when you have many saved. The onboarding is functional but leaves you wondering where everything goes.

The import tool pulls data from CSV files and other managers without much issue. One review mentioned importing from LastPass without trouble. After the import, the real test begins: using the autofill. The app requests accessibility permissions on Android to enable autofill. Once granted, the autofill prompt appears when you tap a username or password field. It works on many apps and websites. But not all. Some sites do not trigger the autofill at all. When it does work, the process is quick. The password generator is accessible from the autofill menu, allowing you to create a strong password on the spot. The generator includes special characters and can create codes up to 34 characters long. Generating a password and then autofilling it into a registration form is a smooth two-step process. However, the real friction comes when you need to retrieve a password manually. Opening the app, waiting for the decryption, and then searching through an unorganized list takes time. The decryption speed varies. On a fresh boot, it can take 10 to 30 seconds to unlock the vault. This delay is noticeable and interrupts the workflow.

The decryption delay and its real impact on daily use

Decryption is the core of any password manager. pCloud Pass uses client-side encryption with 256-bit AES and PBKDF2 key strengthening. Your data is encrypted on your device before it reaches the server. This is secure. But security comes at a cost. The decryption process on Firefox is notoriously slow. Multiple reviews describe it as "painfully slow" and note that it freezes other Firefox windows while decrypting. One user reported that it locks up the CPU and browser for over eight minutes. This is not a rare edge case. It is a consistent complaint across multiple platforms. The Firefox add-on seems to struggle more than the Chrome extension or the mobile app. On Chrome, the extension performs better, with fewer reports of freezing. On Android, the app unlocks with a fingerprint, which bypasses the master password entry. But the decryption still happens in the background. If you have hundreds of passwords, the initial unlock after a reboot takes noticeable time. One user with hundreds of accounts said they are "fine with it" because they only face the delay once per boot. But for someone who needs quick access throughout the day, this delay is a barrier.

The free version adds another layer of friction. It allows only one active device and only one change of active device per month. This is a severe limitation for anyone using multiple devices. If you use the app on your phone and your laptop, you cannot. You have to choose one. If you switch devices, you are locked out for a month unless you upgrade. One reviewer called this restriction "completely useless." The paid plans remove this limit. The lifetime license is a popular option, with several users praising it as "awesome" and a "great value." The pricing starts at around $2.99 per month for the annual plan, with a lifetime option available. The value proposition is clear: pay once, use forever, and get unlimited devices. But the free version's device restriction pushes users toward the paid plan quickly. This is a deliberate choice by the developer, and it shapes the entire user experience.

How the autofill and password generator work together in practice

Consider a real scenario: you are signing up for a new online service. You open the pCloud Pass app on your phone. You tap the plus button to add a new entry. You fill in the site name, your username, and then tap the password generator. The generator creates a 20-character password with uppercase, lowercase, numbers, and symbols. You copy it. You switch to the browser. You paste the password into the registration form. You submit. The app does not automatically save the new credentials unless you manually add them. This is where the workflow breaks. Unlike some competitors that prompt you to save after a successful login, pCloud Pass requires manual entry. You have to go back to the app, create the entry, and then paste the password again. This extra step is a friction point. It is not a dealbreaker, but it is noticeable. The autofill feature on Android works well for existing entries. But for new ones, the manual process feels outdated. The Chrome extension does a better job of capturing new logins, but the mobile app lags behind.

The lack of folders or categories exacerbates this issue. Once you have dozens of entries, finding the right one becomes a scroll-heavy task. Tags help, but they are not a substitute for hierarchical organization. One user specifically requested folders and subfolders, noting that "tags just don't cut it." This is a common theme across reviews: the app does the basics well but lacks the organizational depth of competitors like Bitwarden or 1Password. The absence of a built-in TOTP (two-factor authentication) code generator is another missing feature. Users have to rely on separate apps for 2FA codes, which defeats the purpose of an all-in-one password manager. The developer has added 2FA support for the account itself, but not for generating codes for other services. This is a significant gap.

The real-world performance: bugs, crashes, and smooth operations

Performance is a mixed bag. On Chrome and Edge, the extension runs smoothly. Autofill works on most sites. The interface is responsive. On Firefox, the experience is drastically worse. The decryption freezes the browser. The autofill fails on many sites. The extension sometimes does not detect the password field at all. One review noted that it "does not work properly on many websites." Another said it "overlaps with Firefox existing password suggestions." The Opera browser support is broken entirely. Multiple forum posts confirm that the extension does not work on Opera, and the developer has not resolved the issue. This fragmentation is a red flag for users who switch between browsers. The Android app, on the other hand, is more stable. Fingerprint unlock works reliably. The autofill service integrates with the system well. The interface is clean and responsive. The iOS app also performs well, with Face ID and Touch ID support. The cross-platform sync works, but the performance varies wildly depending on the platform.

Bugs are present but not widespread. One review mentioned that the decryption process hangs when initiated from a password field on an unrelated website. Another noted that the P icon often obscures small fields on some websites, making it hard to click. These are UI quirks rather than critical failures. The customer service is frequently praised as "friendly" and responsive. Users who contacted support for help with the Opera issue received a response, though the problem remained unsolved. The developer seems to be actively working on improvements. The changelog for version 1.8.2 states: "Bug fixes and improvements to make the app run smoother." Version 1.8.1 also mentioned "bug fixes and stability improvements." The updates are frequent, but the core issues—slow decryption on Firefox and lack of organization—persist across versions.

The app's privacy claims are strong. The zero-knowledge architecture means that pCloud cannot access your data. The client-side encryption ensures that even if the servers are breached, your passwords remain encrypted. The 256-bit AES encryption is industry-standard. The PBKDF2 key strengthening adds an extra layer of protection against brute-force attacks. These are not just marketing claims. They are verifiable technical details. The privacy policy states that data is not sold to third parties. The app collects personal information and financial information, but it is encrypted. This is a trustworthy setup. However, one Reddit user reported that their account was compromised. They received an email about a new device being added and their master password being changed. They were unable to use their recovery words to regain access and had to reset the account, losing everything. This incident raises questions about the security of the recovery process. It is unclear if the breach was due to a vulnerability in pCloud Pass or user error. But it is a data point that users should be aware of.

The app includes a recovery word system. During setup, you receive 24 recovery words. These words can be used to regain access if you forget your master password. The words are stored locally and are not accessible to pCloud. This is a standard recovery mechanism. But the Reddit user's experience shows that the recovery process can fail if the account is compromised in a specific way. The user noted that they had not reused passwords and had not seen the credentials in any recent leaks. This suggests that the compromise may have been due to a phishing attack or a session hijack. The developer has not publicly commented on this specific incident. The security of the app is generally solid, but the recovery process is a potential weak point.

pCloud Pass is a European password manager from Switzerland. It is part of the pCloud ecosystem, which is known for its cloud storage service. Over 16 million people use pCloud services. The password manager benefits from this existing user base. The integration between pCloud Pass and pCloud Drive is not deep, but the shared brand and infrastructure provide a sense of trust. The lifetime license is a standout feature. Few competitors offer a one-time payment option. This appeals to users who dislike subscription models. The pricing is competitive. The free version is usable but restrictive. The paid plans offer unlimited devices and additional features. The value for money is high, especially for the lifetime plan.

The app's interface is minimal. It uses a purple color scheme with clear icons. The main screen shows a list of your entries. The search bar is prominent. The add button is at the bottom. The settings menu is straightforward. There is no clutter. This simplicity is a strength. It makes the app easy to use. But it also means that advanced features are missing. There is no password health check. No breach monitoring. No dark web scanning. These are features that competitors like Bitwarden and 1Password offer. The lack of these features makes pCloud Pass feel incomplete. It is a good password manager for basic needs. But for power users, it falls short. The absence of folders and TOTP generation are the biggest gaps. The slow decryption on Firefox is a significant performance issue. The Opera extension not working is a dealbreaker for Opera users.

The app is available on Android 8.0 and above. The APK size is around 11 MB. The app requires accessibility permission for autofill. It also requests fingerprint permission for biometric unlock. These are standard permissions for a password manager. The app does not request unnecessary permissions. It does not have access to your contacts, location, or camera. This is a good privacy practice. The app's data security practices are transparent. The privacy policy is detailed and easy to find. The developer provides clear information about data collection and usage. This level of transparency is commendable.

The free version of pCloud Pass allows unlimited password storage. This is a generous offering. Many competitors limit the number of passwords in the free tier. The unlimited storage is a significant advantage. The free version also includes the password generator and autofill. The only major restriction is the one-active-device limit. This is a harsh restriction. It forces users to choose between their phone and their computer. This is not a typical limitation for free password managers. Most competitors allow multiple devices. The device limit is likely a deliberate strategy to encourage upgrades. It works. Many users who want cross-device sync will pay for the premium plan. The premium plan removes the device limit and adds priority support. The lifetime license is the most attractive option. It is a one-time payment that grants permanent access.

Storing credit card details and secure notes

Beyond passwords, the app stores credit card details and secure notes. The credit card storage includes fields for card number, expiration date, CVV, and cardholder name. The autofill can fill payment forms with this data. This is a useful feature for online shopping. The secure notes allow you to store any text. You can save document IDs, bank account numbers, PIN codes, and other sensitive information. The notes are encrypted just like passwords. This makes the app a versatile tool for storing all types of personal data. The secure notes do not support attachments or formatting. They are plain text. This is sufficient for most use cases. The credit card storage does not include a feature for storing billing addresses or contact information. This is a minor limitation. The overall functionality is solid.

The app does not include a built-in password sharing feature. You cannot securely share passwords with family or team members. This is a significant omission. Many password managers offer secure sharing. The lack of this feature makes pCloud Pass less suitable for families or small businesses. The app is designed for individual use. The developer has not indicated any plans to add sharing. This is a strategic choice. The app focuses on personal password management. It does not try to compete with enterprise solutions. This is a clear positioning. The target audience is individual users who want a secure, easy-to-use password manager without a subscription.

The sync across devices works reliably. Once you add an entry on one device, it appears on others within seconds. The sync uses pCloud's servers. The data is encrypted before it leaves your device. This ensures that your passwords are never exposed in transit. The sync does not require any manual intervention. It just works. This is a key strength of the app. The seamless sync makes the app practical for users with multiple devices. The only sync-related complaint is the device limit in the free version. The sync itself is fast and reliable.