Tether launches PearPass, a cloud-free password manager

Tether—the company behind USDT—has stepped outside pure fintech and into consumer security with PearPass, a password manager that never touches the cloud. Announced on Dec. 17, 2025, PearPass keeps every credential on a user’s device and syncs between devices peer-to-peer (P2P) using end-to-end encryption. There are no centralized servers to hack or leak, Tether says.
ForkLog first flagged the launch, noting the “cloud-free” design, and industry outlets quickly picked it up. Tether itself describes PearPass as a “first-of-its-kind” P2P password manager aimed squarely at the single points of failure that traditional cloud models create.
What PearPass actually does
According to Tether’s release, PearPass:
- Stores credentials locally on your devices—never in the cloud.
- Syncs directly between your devices over encrypted P2P channels.
- Includes end-to-end encryption and a built-in password generator.
- Is fully open source and has undergone an independent security audit by Secfault Security.
- Is slated to be free across major platforms at launch.
The company’s framing is blunt: “If your secrets live in the cloud, they’re not really yours.” CEO Paolo Ardoino says PearPass removes “servers, intermediaries, and back doors,” shifting control to users and their keys rather than to third-party infrastructure.
Why this matters now
Centralized vaults have become high-value targets. In 2022, cloud-stored backups from LastPass were accessed in a major incident; in December 2025, the UK ICO fined LastPass £1.2 million over that breach, underscoring how even “zero-knowledge” managers carry ecosystem risk when cloud repositories are compromised. PearPass is explicitly designed to avoid that architectural risk by eliminating the cloud altogether.
The backdrop is a broader surge in credential theft: research in 2025 highlighted sharp growth in malware targeting password stores, ranking credential stealing among the top attack techniques. A cloud-free approach is one way vendors are trying to shrink that attack surface.
How the P2P model works
Per Tether’s documentation, PearPass keeps the encrypted vault on each device and syncs updates directly between your devices rather than parking anything on a service-provider server. Recovery uses user-owned keys rather than external account resets—another departure from cloud-centric models. The goal is to keep secrets off third-party infrastructure without sacrificing multi-device convenience.
Independent coverage (e.g., The Block) also emphasizes that PearPass avoids cloud storage entirely, positioning it as a consumer tool aligned with crypto’s self-custody ethos but for everyday credentials. It’s part of a wider strategy in which Tether is shipping non-stablecoin products under a privacy/security umbrella.
For security pros, a few practical questions will matter in the coming weeks:
- Threat model & UX trade-offs: How does PearPass handle lost devices or key recovery without re-introducing centralized custody?
- Audit scope: Tether says Secfault Security performed an independent audit; details of methodology, findings, and fixes will help the community evaluate robustness.
- Interoperability: Will PearPass support import/export from other managers and passkey-adjacent workflows as the industry transitions beyond passwords?
Open source and “no single point of failure”
Tether says PearPass relies on open-source cryptographic libraries and is community-audited—a model familiar to crypto users and popular among password-manager power users. The open-source stance invites scrutiny and faster iteration, while the serverless design aims to keep the app operational during outages or in high-threat environments because it doesn’t depend on a company-run backend.
This differs from mainstream password managers that typically offer cloud sync (even when end-to-end encrypted). Those designs enable instant setup and easy recovery—but they also create a centralized metadata footprint and a tempting target for attackers and insiders alike. By choosing P2P sync and local-only storage, PearPass is betting that users will trade a little setup friction for a smaller attack surface.
Availability and where this fits in Tether’s roadmap
PearPass is positioned as the first fully open-source app in Pears, a broader Tether-linked ecosystem focused on sovereignty, privacy, and security. Tether says more tools in that stack are already in development. For now, PearPass is set to roll out for free across major platforms, with its landing page at pass.pears.com.
Industry press cast the launch as a notable pivot: a stablecoin giant shipping a consumer security product. If PearPass gains traction, it could push competing managers to offer serverless or self-hosted options and nudge the market toward device-bound credentials—an idea also gaining steam as passkeys replace legacy passwords across fintech and banking.
Benefits, risks, and what to watch
Benefits
- No cloud, fewer breach paths: Removing centralized storage erases a common failure point seen in recent high-profile incidents.
- Self-custody by default: Control of recovery keys stays with the user—familiar territory for crypto natives.
- Open source + third-party audit: Transparency plus independent testing is a strong starting point.
Risks / open questions
- Recovery complexity: Without server-side resets, key management is critical. Users will need clear, idiot-proof recovery flows (and education).
- P2P reliability across platforms: Firewalls, offline devices, and corporate environments can complicate direct device-to-device sync. Details will matter.
- Audit depth and cadence: One audit is a snapshot; regular assessments and transparent changelogs will build trust over time.
The Conclusion
Tether’s PearPass brings a cloud-free, peer-to-peer architecture to password management at a time when centralized vaults keep making headlines for the wrong reasons. By storing secrets only on user devices, using end-to-end encryption, and offering open-source code with an independent audit, PearPass leans hard into the self-custody playbook that defined crypto—but applies it to something everyone needs: logins. The trade-off is that users must take recovery and key hygiene seriously. If Tether nails the UX and continues transparent audits, PearPass could push the password-manager market toward serverless security as the new default.