BlueHat Vault

Zero-knowledge password vault sealed with two secrets, not one. Face ID unlock, phishing-proof passkeys, AutoFill. No account. No cloud. No tracking.

BlueHat Vault is a password manager built around one idea: your vault should be unreadable to anyone but you — including us.

Every credential is encrypted on your iPhone with AES-256-GCM, using a key derived from two secrets: your master password and a 25-character Secret Key generated only for you. Neither one alone can unlock your vault, and neither ever leaves your device. There's no account to create, no server holding your data, and no cloud sync unless you turn it on yourself.

SECURE BY DESIGN • Two-secret key derivation — your master password and a machine-generated Secret Key both feed the encryption key, so a stolen password alone is never enough • PBKDF2 with 600,000 iterations, current OWASP guidance for password stretching • Face ID or Touch ID unlock, with an optional 6-digit PIN enforced by iOS itself • Periodic master-password re-verification, so a phone left unlocked and unattended can't be quietly drained • Zero-knowledge, opt-in iCloud backup — sealed with the same two secrets, unreadable to Apple or to us

BUILT FOR EVERYDAY USE • AutoFill fills your saved logins in Safari and other apps — no copying and pasting passwords • Full passkey support: create and sign in with phishing-proof passkeys stored right in your vault • A built-in password generator with adjustable length and character rules • Import your existing logins from a CSV export in seconds • A Security Score that grades your vault's real health — strength, reuse, and age — calculated entirely on your device

SECURITY NEWS YOU CAN TRUST A live feed of security news and curated tips, cryptographically signed so you know it actually came from BlueHat — not an injected or spoofed feed.

No account. No cloud, unless you choose it. No tracking, no analytics, nothing to sell. Just a vault that's yours alone.