ZECURI

Zecuri is a privacy-focused password manager for iPhone and iPad. In version 1.0, your vault lives on your device: passwords are encrypted locally with industry-standard cryptography before they are saved. Only you hold the master password that unlocks them. **What Zecuri v1.0 includes:** • Local password vault — Create, view, edit, and delete login entries (title, URL, username, password, notes). • On-device encryption — Vault data is encrypted with AES-256-GCM via Apple CryptoKit. Your master password is stretched with Argon2id (memory-hard KDF) to derive the encryption key. The master password is never sent to any server. • Search — Find entries by title, URL, or username. • TOTP codes — Store an otpauth:// URI on a login and view the current 6-digit code in the app. • Biometric unlock — Optionally unlock with Face ID or Touch ID after your first master-password unlock. • Two-factor for vault unlock — Optionally require a hardware security key (WebAuthn) or recovery code in addition to your master password. • Encrypted backup — Export your vault as an encrypted backup file (separate backup password). Import a backup to restore on a new device. • CSV import — Bring in logins from Bitwarden, 1Password, LastPass, Chrome, or KeePassXC export files. • Password AutoFill extension — Optional iOS Credential Provider extension. Enable it in Settings → Passwords → AutoFill Passwords, then pick Zecuri. Requires master-password or biometric re-authentication per fill. **How it works (v1.0):** 1. Create a master password (minimum 12 characters). It stays on your device. 2. Zecuri derives an encryption key with Argon2id and encrypts your vault with AES-256-GCM. 3. Encrypted vault files are stored in the app's secure container (App Group + Keychain for session state). 4. Lock the vault when you're done. Re-enter your master password (or use biometrics) to unlock. **Security & privacy (v1.0):** • AES-256-GCM vault encryption (Apple CryptoKit) • Argon2id key derivation (64 MiB, t=3, p=4) • Master password and derived keys never transmitted • No analytics, no telemetry, no ads • Works fully offline — no account or internet connection required in v1.0 • Built by Linespotting AB (Sweden) **Not in v1.0 (planned for later releases):** • Cloud sync between devices or with the Zecuri Chrome extension • Password generator • Credit-card and identity record types (data model exists; UI not yet) • Tags and advanced organization • Passkey/WebAuthn credential storage in the vault **Requirements:** • iOS 16+ • No iCloud Keychain required • Internet not required for core vault features in v1.0 **Support & legal:** • Privacy Policy: https://zecuri.com/legal/privacy • Terms of Service: https://zecuri.com/legal/terms • Support: https://zecuri.com/support • Contact: privacy@zecuri.com