SEPass

SEPass is intended to let a user do three things:

1. Generate a GPG keypair inside your device's Secure Enclave. The private key is created in the enclave and can never leave the device. SE Pass exports the matching GPG public key for you to add to your password store as an additional encryption key.

2. Sync your password store via git to your device. You can clone and refresh over HTTPS (public or token) or SSH (with a separate enclave key for ssh authentication).

3. Browse the password tree and decrypt passwords on demand. Decryption runs in the Secure Enclave, gated by biometrics (Face ID or Touch ID). The clipboard then clears itself automatically after 45 seconds.

SE Pass has no account, sends nothing to us (Modiot Labs), and uses no analytics or tracking. It talks only to the git server you configure. It’s intended to be a relatively focused app to enable access to your existing password store on your portable device.