Vault vs BurnPony

Vault is a private, offline password manager that keeps your credentials safe on your device and only on your device. No accounts. No cloud. No subscriptions required to use the core app. Your passwords are encrypted with AES-256-GCM, the same standard used by banks and governments. Only you can unlock them, using the device passcode or biometric authentication (Face ID / Touch ID) that you already trust. KEY FEATURES * Military-grade encryption Every password, note, and credential is encrypted with AES-256-GCM before being written to storage. Your data is never stored in plain text not even for a moment. * 100% offline always Vault has no internet connection, no cloud sync, and no external servers. Your data never leaves your device. Not even to us. * No account required Open the app, set a master password or use biometrics, and you're done. No email address, no registration, no profile. *Strong password generator Create random, high-entropy passwords at the tap of a button. Customize length and character sets to meet any site's requirements. * One-tap copy Copy usernames or passwords to the clipboard with a single tap. Clipboard content is automatically cleared after 30 seconds for extra safety. *Auto-lock Vault automatically locks itself after a configurable idle timeout. Re-open with Face ID, Touch ID, or your master password. YOUR PRIVACY, GUARANTEED Vault collects zero personal data. There are no analytics SDKs, no crash reporters that phone home, no advertising frameworks nothing. The app's entire job is to store your secrets locally and keep them safe. That's it. If you delete the app, your data is gone. There is no recovery server, because there is no server. Vault because your passwords belong to you.

Send a secret without making the other person install anything. Write a note, set the self-destruct rules, share one link. The note is encrypted on your iPhone with AES-256-GCM before anything is uploaded, and it decrypts only in the recipient's browser. The decryption key travels in the part of the link after the #, which browsers never send to any server, so the server stores ciphertext it cannot read, plus a note ID, a view count, and an expiry. No accounts, no names, no analytics. THREE KINDS OF NOTE • Simple: one note, one link, optional passphrase • Double bottom: one link with separate compartments, each opened by its own passphrase. Hand over one passphrase and only that compartment shows; nobody can prove the others exist • Split key: the note opens only when enough key links are combined, for example any 2 of 3 WHAT YOU CONTROL • Views: burn after 1 reading, or allow up to 100 • Expiry: 5 minutes to 30 days, changeable later, counted from now • Scheduled opening: the note stays hidden, looking like it does not exist, until the time you pick • Optional passphrase, stretched with PBKDF2 and mixed into the key. Send it through a different channel than the link • Open immediately: skip the confirmation screen when a note should open on the first visit • Auto-hide: the revealed note re-hides after a timer • Read receipts, disclosed to the recipient before they reveal the note. BurnPony does not do silent read tracking • Defaults for new notes, set once in Settings • A private label for your own list; it never leaves your device • QR code for in-person handoff: the whole link, key included, transfers with no network at all SAVED COPIES (OPTIONAL, OFF BY DEFAULT) Keep a copy of a note you send so you can reread it after it burns. You choose per note. Each copy is encrypted to a key held in the Secure Enclave, which only uses it after Face ID, Touch ID or your passcode. Double bottom notes are never saved. HONEST LIMITS Whoever has the full link (and passphrase, if set) can read the note. A recipient can always copy or photograph a note while it is visible. Self-destruction limits future access; it does not control the moment of reading. OPEN The app, the server, the viewer, and the wire-format specification are open source (Apache-2.0), with cross-implementation test vectors. Self-hosters can point the app at their own server from Settings. Protocol: https://burnpony.app/protocol BurnPony is part of the pony family of privacy tools: encryption you can inspect instead of taking a developer's word for it.