NextDNS Remote vs VaultApprover

NextDNS Remote is a third party app for controlling your NextDNS setup. You can view statistics and logs, as well as change blocking settings and lists. *Analytics* See the number of (blocked) queries and a chart of your recent activity, grouped by profile. Furthermore, you can see different analytics about domains, devices, security, and more. The timespan of the charts & statistics is configurable. *Query Log* Explore what requests your devices make (including a 'live updating' feature), as well as see details about the query and device. For blocked queries you can find out why they're blocked. *Blocking* Edit your blocklist, deny & allowlist, native tracking protection, and more. Quickly toggle blocking for services and categories. *Settings* You have the ability to change all security, privacy, and parental control settings. *Multiple accounts* There's support for multiple NextDNS accounts and you can switch between them seamlessly. Multiple profiles are supported too: you can even create new profiles right from the app. A NextDNS+ purchase or subscription is required to use more than one account, the ability to do mutable actions (like changing settings or creating a profile), access the Live Log, remove limits, and more. You can get NextDNS+ with a one-time purchase or optional subscription. == Note: You need a NextDNS account for this app to function. NextDNS Remote is a third party app which uses the NextDNS API and is in no way affiliated with NextDNS. Find out more about NextDNS at https://nextdns.io/. This app offers a "NextDNS+" version with additional features, in the form of a lifetime purchase, a monthly subscription, or a yearly subscription. Subscriptions will automatically renew unless auto-renew is turned off at least 24 hours before the end of the current period and will be charged to your iTunes account. You can turn off auto-renew/manage subscriptions in your iTunes Account Settings after purchase. Terms of Use: https://www.apple.com/legal/internet-services/itunes/dev/stdeula/

VaultApprover approves Bitwarden "Log in with device" requests on bitwarden.com, bitwarden.eu or your own self-hosted Vaultwarden/Bitwarden server. It does one thing: shows who is signing in, so you can approve or deny it in one tap. KEY FEATURES: • Cloud or self-hosted — bitwarden.com (US), bitwarden.eu (EU) or any server URL • Client certificates (mTLS) — import a .p12/.pfx for a server that requires one • Biometric unlock — Face ID / Touch ID or fingerprint on every launch • Real-time requests — WebSocket updates with a polling fallback • Fingerprint phrase — the same 5-word phrase the official Bitwarden apps show • 5-minute countdown — an expired request can no longer be approved • Request history — every approval and denial with device, IP and response time • Two-step login — authenticator app, email code, YubiKey OTP or recovery code • PIN tab — offline tools for your own PINs: PIN Shift, PIN 24 (compatible with Ledger Passwords) and YubiKey PIN/PUK • Optional settings sync — sign in with Apple or Google to keep theme, language and timers the same on all your devices; delete the sync account anytime in Settings • English, Russian, Arabic and Simplified Chinese; light and dark themes HOW IT WORKS: 1. Pick bitwarden.com or bitwarden.eu, or enter your server URL 2. Sign in with your email and master password (used once, never stored) 3. Turn on biometric unlock 4. When you choose "Log in with device" on another device, the request shows up in the app 5. Check the fingerprint phrase and tap Approve — done SECURITY: • Your master password is never stored on the device • End-to-end encryption: RSA-2048-OAEP key exchange • Your user key is kept in the device's secure storage behind biometric lock • All cryptography runs on the device — the server never sees your keys • Argon2id and PBKDF2 key derivation • Privacy screen hides the app in the app switcher VaultApprover never opens or shows your vault items. It only approves sign-in requests. Works with accounts that unlock with a master password. SSO, trusted-device and Key Connector accounts are not supported.