Kakuremi vs KeeHolder

A local-first KeePass (KDBX) password manager for iPhone -- works offline, with AutoFill and Face ID, compatible with KeePassXC and KeePass2. Opening your first database and editing your vault are free. YubiKey NFC unlock is included free -- no subscription. Kakuremi was built for one thing: a KeePass vault that stays yours. **YubiKey Challenge-Response -- Free, No Subscription** Enter your master password, then hold your YubiKey to the top of your iPhone over NFC -- the key is a second factor, not a replacement for your password. The hardware-key unlock is not time-limited, not gated, and not billed separately. Kakuremi uses HMAC-SHA1 Challenge-Response, the same scheme as the KeePass desktop apps. It works with NFC-capable YubiKey 5 Series models and the YubiKey NEO once an HMAC-SHA1 slot is configured (via the YubiKey Manager / Authenticator app). FIDO2/passkey-only keys -- such as the Security Key Series -- cannot unlock a database, because they do not implement HMAC-SHA1 Challenge-Response. **A KDBX Engine Written in Rust** Kakuremi's KDBX parsing and serialization are written in Rust, a memory-safe language chosen to reduce the risk of buffer-overflow and use-after-free bugs. Open KDBX 3.x (read-only) and KDBX 4.x; create, edit, and save in KDBX 4. Compatible with KeePassXC, KeePass2, and other standard-compliant KeePass clients. **AutoFill in Safari and in Apps** Kakuremi ships a native Credential Provider extension that works with AutoFill on current and older versions of iOS. Tap the key icon, choose Kakuremi, and pick the login you need. **Local-First -- No Accounts, No Cloud Sync** Kakuremi has no accounts, no sync service of its own, no telemetry, and no analytics. Your database is decrypted in memory and released when the app locks. An encrypted copy of your logins (used by AutoFill) and recent copies of your vault file stay in the app's own storage -- you can clear both in Settings. Offline by default. Apart from App Store purchase checks, Kakuremi goes online only for optional features you turn on: website icons (only the domain goes to Google), breach check (only a 5-character hash prefix goes to Have I Been Pwned) and PC Connection (Pro), which sends a login you choose to your PC, end-to-end encrypted, via our relay on Cloudflare. The relay deletes it once your PC receives it (180 seconds at most). Cloudflare's recovery log may keep an encrypted copy for up to 30 days, which neither Springhiker nor Cloudflare can read. PC Connection never sends your vault file. **What's Free** - Create or open one KeePass database (KDBX 4; KDBX 3.x read-only) - Create, edit, and organize entries, groups, and tags - YubiKey NFC Challenge-Response unlock - Face ID / Touch ID biometric unlock - iOS AutoFill (Credential Provider) - Store TOTP (2FA) secrets and view live one-time codes - Password generator - Search and Recycle Bin - View attachments - Password breach check (Have I Been Pwned) - Themes (Light / Dark / Warm) and 6 accent colors - Localized in 9 languages **Kakuremi Pro** For power users who want more: - PC Connection -- fill in logins in Chrome on your PC from Kakuremi on your iPhone (needs Kakuremi's Chrome extension) - Use more than one database - Add file attachments - Backup history & restore Pricing: a monthly or yearly subscription, or a one-time purchase. New subscribers get a 1-month free trial on the yearly plan; the subscription then renews at the yearly price unless it is canceled at least 24 hours before the trial ends. Prices for your region are shown on this page. **Why "Kakuremi"?** Kakuremi (Japanese: hidden form) refers to the art of concealment. Your secrets deserve to be invisible -- no account to sign into, no copy of your vault on our servers, no fragile code to corrupt them. Just hidden in the file you chose. Built by SPRING HIKER CORP. --- Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://kakuremi.com/privacy/

KeeHolder v1.0 — a trust-first KeePass client for iPhone and iPad. Read, write, and manage your KDBX files without a server, an account, or telemetry. Full KDBX3 and KDBX4 support. Face ID / Touch ID unlock. Entry and group editing, database creation, master-password change, and save-conflict detection. AutoFill fills passwords into Safari and third-party apps via the QuickType bar after Face ID or master-password confirmation. No passwords leave the encrypted file. Live TOTP verification codes — 6- or 8-digit with a countdown timer — for entries with a TOTP seed (KeePassXC otpauth:// and KeePass 2 TOTP Seed formats). On iOS 18+, one-time codes also fill via AutoFill without opening the app. Free with one database. Unlock multiple databases with a one-time purchase. No subscriptions, no ads.