GuptVault

GuptVault is a privacy-focused credential manager for iPhone, iPad, and Mac, built for securely storing and organizing sensitive information.

STRONG ON-DEVICE ENCRYPTION Every credential — including its name — is encrypted with AES-256-GCM on your device before it ever touches iCloud. Only encrypted vault data is synced through your private iCloud database.

ALL YOUR SECRETS, ONE PLACE Store and organise: • Logins — username, password, website, and TOTP 2FA codes with live countdown • API Keys — scoped by environment (dev / staging / production) • SSH Keys — securely stored alongside your other credentials • Credit Cards — masked display with one-tap copy • Secure Notes — end-to-end encrypted markdown notes • Databases — connection strings auto-generated • Environment Sets — import .env files and copy them back out when you need them • Passkeys, verification codes, and identities — AutoFill them in Safari and apps

OPTIONAL DEVELOPER TOOLS Turn on Developer tools in Settings to keep API keys, environment sets, databases, and SSH keys with everything else. View, add, copy, and import a .env file on iPhone, iPad, and Mac — and see API keys that are about to expire.

SECURITY HEALTH DASHBOARD GuptVault automatically scans your vault for: • Breached passwords (via HaveIBeenPwned — your passwords never leave your device) • Weak passwords with strength scoring • Reused passwords across accounts • Old passwords that haven't been rotated in 90+ days • Accounts without 2FA enabled

NATIVE ON EVERY APPLE DEVICE • iPhone — optimised single-column layout with swipe gestures • iPad — sidebar layout with list and detail side by side • Mac — sidebar navigation and menu bar status

WIDGET • Vault Status — your security score and quick shortcuts on the Home Screen and Lock Screen. Never shows passwords or item names.

SEAMLESS ICLOUD SYNC Your encrypted vault syncs automatically across all your Apple devices via CloudKit. No account required — no third-party servers.

PRIVACY FIRST • Zero telemetry — no analytics, no crash reporting to third parties • No ads, no tracking • Face ID, Touch ID, Optic ID, or device passcode unlock • Offline recovery key for restoring device access • Auto-lock after configurable inactivity period • Automatic clipboard clearing after 30 seconds