VaultKeepR : Password Manager

VaultKeepR encrypts your passwords, cards, passkeys and notes on your device before they ever leave it. No email, no account, no server that can read your vault. WHY VAULTKEEPR IS DIFFERENT Every mainstream password manager asks for an email and keeps your encrypted vault on their servers. VaultKeepR removes that layer: no signup, no account password, no support desk that can reset your access. Your identity is created in the background on your device, and only you hold the keys. EVERYTHING IN ONE VAULT Store logins, cards, identities, secure notes and TOTP codes, organized with tags, favorites and instant search. Unlock with Face ID or Touch ID. AUTOFILL THAT JUST WORKS Fill credentials in Safari and any app via iOS AutoFill. Copy a 2FA code with one tap from the built-in authenticator. BUILT-IN TWO-FACTOR AUTHENTICATION TOTP codes generated locally, next to your passwords. No separate authenticator app needed. SECURITY YOU CAN VERIFY - XChaCha20-Poly1305 encryption, keys derived with Argon2id - An HMAC-SHA256 commitment detects any substitution of your vault on the storage side - Public code, public CI, SonarCloud A/A/A quality gate, OpenSSF Scorecard 8/10, signed releases - Recovery with Shamir 3-of-5 shares: any 3 shares reconstruct access. No support desk involved. SYNC WITHOUT THE CLOUD Your encrypted vault replicates through IPFS. Works offline; edits sync automatically when you are back online. No cloud account required. MOVE ANY TIME Import from Bitwarden, 1Password, LastPass, KeePass, Dashlane, NordPass or CSV. Export plain, encrypted or PGP. No lock-in. Your data follows you if you leave. PRIVACY, STATED PLAINLY No tracking, no analytics, no ads. VaultKeepR makes network contacts only for features you use, and documents them. WHAT THE APP CONNECTS TO The vault is encrypted on-device and never readable by VaultKeepR or any third party. For sync and security features, the app makes these optional network contacts (no personal data, no tracking): - Sync: encrypted vault via decentralized IPFS, on a configurable schedule - Breach scanner: k-anonymity, only a password hash prefix is sent, never the password - Shared documents: a wallet identifier and IP address are used as a lookup key See details at vaultkeepr.xyz/privacy TECHNICAL DETAILS - Encryption: XChaCha20-Poly1305 (AEAD) - Key derivation: Argon2id (memory-hard KDF) - Sync: IPFS-based encrypted replication - Authentication: WebAuthn/FIDO2 passkeys - Biometrics: Face ID / Touch ID with Secure Enclave VaultKeepR is free. Premium features are available with an optional subscription. Decentralized. Private. Yours. Terms of Use (EULA): https://vaultkeepr.xyz/terms Privacy Policy: https://vaultkeepr.xyz/privacy Support: https://vaultkeepr.xyz/support