Free · offline · Windows

ColdPass by VERAQIS keeps passwords in a local encrypted vault.

A focused password manager with no account, cloud service, subscription, telemetry or network dependency. The master password is never stored.

Clean Windows rebuild pending

Windows x64 portable ZIP · 62.6 MiB · free download

VERAQIS product family identity — ColdPass is being rebuilt with the current VERAQIS identity and reviewed release process.

Unsigned Windows release. The portable executable has no paid Authenticode certificate, so Windows SmartScreen may warn. Verify the published SHA-256 before running it. The release's offline Trust Pack was verified successfully.

LOC

Local by design

The encrypted vault stays on your computer. ColdPass has no cloud account, telemetry or call-home.

AES

Encrypted vault

AES-GCM-256 protects vault contents. The current implementation derives keys with PBKDF2-SHA-256.

SAFE

Safer storage workflow

Atomic saves and local backups reduce the chance that an interrupted write destroys the current vault.

What is in the verified v1.0.0 download

Native Windows GUI, self-contained for x64.
Create, unlock, search and edit a local encrypted password vault.
English and Russian interface, light/dark presentation and accessibility support.
Import paths documented for Google/Chrome CSV and JSON in this release.
Offline release manifest and ECDSA P-256 Trust Pack verification.

Newer development work is not advertised here until it becomes a clean, verified release.

Download temporarily withdrawn

The previous Windows package was retired. A clean package will be published only after a fresh build, vault-data inspection, release-artifact review and Windows signing checks.

Is ColdPass free?

Yes. ColdPass remains free, but its Windows download is temporarily withdrawn while a clean release is rebuilt.

Does it send my vault to VERAQIS?

No. The application is offline and does not include telemetry or a network-backed account.

Why can Windows display a warning?

The v1.0.0 executable is not Authenticode-signed. The SHA-256 and offline Trust Pack provide integrity evidence, but they do not replace Windows publisher reputation.