Passepartout, VPN Client vs Titanium Passkey

Protect your online privacy with Passepartout, a smart VPN client seamlessly integrated with iOS, macOS, iPadOS, and tvOS. HOW PASSEPARTOUT WORKS Passepartout includes basic import and connection features. Additional features require an in-app purchase. INCLUDED FEATURES: - Support for OpenVPN and WireGuard protocols. - OpenVPN obfuscation (using --scramble). - Shortcuts automation for streamlined operations. - Exclude endpoints for precise control. OpenVPN support focuses on common options; compression is not supported because it is not secure. REQUIRES AN IN-APP PURCHASE: - Support for Apple TV. - On-demand rules for smart, automated connections. - iCloud sharing for seamless multi-device use. - DoH/DoT for secure DNS queries. - Domain matching for split DNS. - Export and share profiles. - Custom routing for advanced configurations. - Interactive login with support for one-time passwords (OTP). - Non-VPN profiles (e.g. DNS/Proxy-only setups). FAMILY SHARING ENABLED All purchases support Family Sharing, so you can share them with your family members. PRIVACY YOU CAN TRUST Passepartout is built with transparency and privacy in mind: - See exactly which servers you’re connecting to. - No ads, trackers, or unnecessary background activities—just the VPN connection you need. OPEN SOURCE AND COMMUNITY-DRIVEN Passepartout is open source and constantly evolving with the help of its community. Check out the project on GitHub: https://github.com/partout-io ~ Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://partout.io/passepartout/privacy/

Titanium Passkey is an offline FIDO2 / WebAuthn credential provider for iPhone, iPad, and Mac. Every private key lives inside the Secure Enclave and never leaves it. Every sign-in is gated by Face ID or Touch ID, enforced in hardware. WHY TITANIUM PASSKEY? • Passkeys bound to silicon — never replicated to a vendor cloud you don't control • No account, no sign-up, no subscription — install and use • Works with every passkey-capable site: GitHub, Google, your bank, self-hosted apps • A stolen phone signs nothing — biometric enrollment gates the private key at the hardware level • Zero telemetry, zero analytics, zero tracking SDKs in the binary • Sign in on any desktop — Windows, Mac, Linux, Chromebook. On the browser's passkey prompt, choose "Use a Device Nearby" / "Other Options" and scan the QR code with your iPhone. Your phone stays the authenticator; the desktop never sees your key. HOW IT WORKS Enable Titanium Passkey under Settings → Passwords → Use Passwords and Passkeys from. When a site requests a passkey, iOS routes the challenge to the extension. The extension wakes, Face ID or Touch ID unlocks the key inside the Secure Enclave, the assertion is signed on-chip, and handed back. You're signed in. WEBAUTHN SUPPORT • ES256 (COSE -7) over WebAuthn — the baseline every passkey-capable site supports • PRF extension (hmac-secret) for encrypted data binding • Conditional mediation — silently offer passkey sign-in without interrupting the user • Fast authentication — skip the picker when only one passkey matches STORAGE & KEYS • EC P-256 keys created with kSecAttrTokenIDSecureEnclave — not extractable by the app, iOS, or Apple • Gated by biometryCurrentSet + privateKeyUsage — re-enrolling Face ID invalidates keys • Keychain marked AfterFirstUnlockThisDeviceOnly — excluded from iCloud, iTunes, and Finder backups • Optional multi-device tier for iCloud Keychain sync, off by default, trade-offs explained in-app PRIVACY • The Credential Provider extension has no network entitlement — it cannot reach the internet • No account, no email, no cloud • No telemetry, no analytics, no ad identifiers • Attestation uses the 'none' format — we don't uniquely identify your device to relying parties • Anonymous crash reports only if you've opted in via iOS Settings No subscriptions. No in-app purchases. Just passkeys, bound to silicon.