PrivPass Password Manager vs VaultKeepR

Your security is our top priority. Here’s how PrivPass works and how we keep your passwords safe: • Storage All your data is securely stored within your iCloud account. Meaning you can access your PrivPass password store from all your Apple devices. Nothing is ever stored on any of our servers. We don't store any personal information. In fact, we store nothing. This is your password store, you shouldn't have to give up your personal information in exchange for security. • Master Password Protection Your master password is never stored as plain text. Instead, it is securely saved in Apple’s Keychain, ensuring only you, and your device, can access it. • Strong Encryption Every password you save is encrypted using AES-GCM, a highly secure encryption method trusted worldwide. To enhance security, we use a unique, randomly generated salt each time encryption occurs. This ensures that even identical passwords are encrypted differently. Encryption is performed on device, before being stored in your iCloud account. • Safe Decryption When you need to access your passwords, your master password generates a secure key to decrypt them. This process uses a nonce (random number) and authentication tag, verifying that your data remains safe and untampered. Decryption is also performed on device. • Zero Plain Text Storage We never store your passwords in plain text. They remain encrypted at all times, meaning even if someone gained access to your data, they wouldn’t be able to read it. • Reach out to us If you ever have any questions, concerns or feedback, you can reach us at help@tophhie.cloud.

VaultKeepR encrypts your passwords, cards, passkeys and notes on your device before they ever leave it. No email, no account, no server that can read your vault. WHY VAULTKEEPR IS DIFFERENT Every mainstream password manager asks for an email and keeps your encrypted vault on their servers. VaultKeepR removes that layer: no signup, no account password, no support desk that can reset your access. Your identity is created in the background on your device, and only you hold the keys. EVERYTHING IN ONE VAULT Store logins, cards, identities, secure notes and TOTP codes, organized with tags, favorites and instant search. Unlock with Face ID or Touch ID. AUTOFILL THAT JUST WORKS Fill credentials in Safari and any app via iOS AutoFill. Copy a 2FA code with one tap from the built-in authenticator. BUILT-IN TWO-FACTOR AUTHENTICATION TOTP codes generated locally, next to your passwords. No separate authenticator app needed. SECURITY YOU CAN VERIFY - XChaCha20-Poly1305 encryption, keys derived with Argon2id - An HMAC-SHA256 commitment detects any substitution of your vault on the storage side - Public code, public CI, SonarCloud A/A/A quality gate, OpenSSF Scorecard 8/10, signed releases - Recovery with Shamir 3-of-5 shares: any 3 shares reconstruct access. No support desk involved. SYNC WITHOUT THE CLOUD Your encrypted vault replicates through IPFS. Works offline; edits sync automatically when you are back online. No cloud account required. MOVE ANY TIME Import from Bitwarden, 1Password, LastPass, KeePass, Dashlane, NordPass or CSV. Export plain, encrypted or PGP. No lock-in. Your data follows you if you leave. PRIVACY, STATED PLAINLY No tracking, no analytics, no ads. VaultKeepR makes network contacts only for features you use, and documents them. WHAT THE APP CONNECTS TO The vault is encrypted on-device and never readable by VaultKeepR or any third party. For sync and security features, the app makes these optional network contacts (no personal data, no tracking): - Sync: encrypted vault via decentralized IPFS, on a configurable schedule - Breach scanner: k-anonymity, only a password hash prefix is sent, never the password - Shared documents: a wallet identifier and IP address are used as a lookup key See details at vaultkeepr.xyz/privacy TECHNICAL DETAILS - Encryption: XChaCha20-Poly1305 (AEAD) - Key derivation: Argon2id (memory-hard KDF) - Sync: IPFS-based encrypted replication - Authentication: WebAuthn/FIDO2 passkeys - Biometrics: Face ID / Touch ID with Secure Enclave VaultKeepR is free. Premium features are available with an optional subscription. Decentralized. Private. Yours. Terms of Use (EULA): https://vaultkeepr.xyz/terms Privacy Policy: https://vaultkeepr.xyz/privacy Support: https://vaultkeepr.xyz/support