Veil vs KeeHolder

At-rest encryption: All media is encrypted at-rest with AES-256-GCM. Your encryption key is secured by Face ID or Touch ID. Fully offline: All your media remain offline and never leave your device. Capture or import: Take photos and videos directly, or import from your library. Everything goes straight into your encrypted vault. Tied to your biometrics: Only you can unlock your vault. If biometric enrollment changes, encrypted data cannot be recovered. Veil stores nothing in the cloud and collects no data whatsoever. Your vault exists only on your device, protected by your biometrics.

KeeHolder v1.0 — a trust-first KeePass client for iPhone and iPad. Read, write, and manage your KDBX files without a server, an account, or telemetry. Full KDBX3 and KDBX4 support. Face ID / Touch ID unlock. Entry and group editing, database creation, master-password change, and save-conflict detection. AutoFill fills passwords into Safari and third-party apps via the QuickType bar after Face ID or master-password confirmation. No passwords leave the encrypted file. Live TOTP verification codes — 6- or 8-digit with a countdown timer — for entries with a TOTP seed (KeePassXC otpauth:// and KeePass 2 TOTP Seed formats). On iOS 18+, one-time codes also fill via AutoFill without opening the app. Free with one database. Unlock multiple databases with a one-time purchase. No subscriptions, no ads.