Run4Password

Your passwords stay on your iPhone. No account, no sync service, nothing to subscribe to — and now you can move them to a second device with just the two cameras.

Run 4 Password keeps your passwords on your iPhone and nowhere else.

There is no account to create, no email to hand over, and nothing to subscribe to. The app contains no networking code at all — and you do not have to take that on faith. Turn on Airplane Mode and use it. Everything works, because nothing was ever going to leave.

WHAT IT DOES

• Stores your passwords in a vault encrypted with AES-GCM, unlocked by a 6-digit PIN • Ties the encryption key to this iPhone's Secure Enclave, so the vault cannot simply be copied off and attacked somewhere else • Fills passwords for you in Safari and other apps, with Face ID or Touch ID • Keeps the site each password belongs to, and finds it when you search • Generates strong passwords and passphrases • Hides the app from the app switcher and blocks screenshots while it is open • Locks itself when you leave it • Moves your passwords to another phone by holding the two together — no server, no account • Works in English, German and Italian

BACKUPS, HONESTLY

Nothing leaves this phone unless you export it — and what you export is encrypted before it leaves.

When you make a backup, the app seals your whole vault into a single file and asks you where to put it. It hands you ten randomly chosen words to write on paper; those words, and nothing else, open that file. We do not keep a copy, and there is no way for us to recover one. Put the file somewhere you can find it again and keep the paper somewhere else — either one on its own is useless.

That backup restores onto a different phone. That is the point of it.

MOVING TO A SECOND PHONE

If you want the same passwords on two phones you own, you do not need a file, an account or a server. Hold the two phones facing each other. Each one shows the other a code, you check that both screens show the same six digits, and the passwords travel across as pictures on the screen.

This is what the camera is used for, and it is the only thing it is used for. Nothing is photographed and nothing is saved — the camera reads a code and forgets it.

Nothing is ever deleted by this. Passwords already on the receiving phone stay exactly as they are; anything new is added. If the same entry differs on both phones, that phone asks you which one to keep.

WHAT WE CANNOT DO FOR YOU

If you forget your PIN and have no backup, your passwords are gone. There is no reset link, no support address that can help, and no key escrow. That is not a gap in the product — it is what "only you can open it" actually means, and any app that offers you a way back in is telling you something about who else can get in.

NO TRACKING

No analytics. No crash reporting. No advertising identifier. Nothing is collected, because there is nothing here that could send it.