Kod Vault — Secrets & Keys

Kod keeps passwords, API keys, environment values and ID documents in one encrypted vault on your own devices. There is no Kod service. Nothing to sign up for, no password to reset, and no company holding your data. Your master password is the key to the data rather than a login — it is never transmitted, stored or escrowed anywhere. ENCRYPTED ON YOUR DEVICE Everything is encrypted with AES-256-GCM before it goes anywhere. Your master password becomes a key through Argon2id, which is memory-hard and tuned to make guessing expensive. SYNCS THROUGH YOUR OWN iCLOUD Your devices stay in step through your private CloudKit database, already encrypted. Apple stores bytes it has no key for. Kod also works entirely offline, and with no iCloud account at all. ORGANISED BY PROJECT Group secrets per project — one for each client, app or environment. Every project carries its own encryption key, and folders nest as deep as you like. Drag an entry, a folder, or a whole project to move it; anything crossing a project is re-encrypted under that project's key. ID DOCUMENTS, READ FOR YOU Scan a passport or ID card and Kod straightens it, corrects the perspective, and reads the machine-readable zone — the strip of chevrons along the bottom, where every field carries a check digit. A misread is rejected rather than quietly filling in a wrong number. Scans are encrypted like everything else, and read entirely on your device. TWO-FACTOR CODES Scan the QR code your service shows and keep its rotating code beside the login it belongs to. No separate authenticator app. UNLOCK YOUR WAY Face ID, Touch ID, a device PIN, or your master password. Turn off the ones you do not want, as long as one remains. Locked out of a device? Approve it from another you own, after comparing a six-digit code. BRING YOUR PASSWORDS ACROSS Imports from 1Password, Bitwarden, Chrome and plain CSV, and writes CSV back out whenever you like. There is no lock-in to a service that does not exist.