Product

Less friction.
More peace of mind.

From opening the app to signing in, each small step should feel clear and effortless.

01

Codes in order. Time in view.

Each account is a ticket, with its service, account name, and code in place. Perforations count down, and the stub previews the next code.

Account search · Grouped digits · Tap to copy

02

Start with one account.

Paste an otpauth:// link or enter a secret manually. Check the name, algorithm, and period, then preview the code before saving.

Manual entry implemented · Camera scanning awaits device testing

03

Unlock and carry on.

Open your vault with Face ID, Touch ID, or a local six-digit PIN. Set automatic locking when you leave the app, and use your recovery code if you forget your PIN.

Implemented on Apple · Biometrics await physical-device validation

04

Care for the moments in between.

Copied codes expire after 30 seconds. On iOS, content is covered in the background to keep codes out of the app switcher.

Verified on iOS · macOS clipboard validation pending

05

A backup for your next beginning.

The development build supports encrypted backups, restored or imported with a recovery code. Plaintext otpauth:// export is also available after an additional confirmation.

Flow verified in iOS Simulator · macOS file selection and export await validation

UNDER THE FOLD

Open to a closer look.

Read the encryption spec ↗
01 / ENCRYPTION

Encrypt, then save

XChaCha20-Poly1305 encrypts account data. A shared Rust core handles cryptography and the vault file format.

02 / LOCAL UNLOCK

A PIN for this device

Argon2id derives the PIN key, and the wrapped key stays in the local Keychain. The recovery code restores access.

03 / OPEN SOURCE

Implementation in the open

Code, file specifications, and development plans are public. The project is early-stage and has no independent security audit conclusion.

WHAT COMES NEXT

More to look forward to. One step at a time.

These features are planned and not yet available.See release status →