Skip to main content

A private password manager for iPhone that keeps your vault on your device

Most password managers ask you to trust a stranger's cloud before you have typed a single password. Zen Passwords encrypts your vault on your iPhone first, with sync riding your own Apple ID only if you turn it on. Here is what "on device" actually buys you.

Tuesday, 8:52 a.m. Security line at the airport. Your phone buzzes with a login you have not used in months. You unlock Zen Passwords with Face ID, copy the code, paste it, and put the phone away before the belt moves. Nothing left your pocket to do that.

That last sentence is the whole pitch of this article, and it is worth being precise about what "nothing left your pocket" actually means.

The default a lot of password managers ask you to accept

Plenty of password managers work well specifically because they assume the cloud first: create an account, verify an email, and your vault lives on somebody else's server from minute one. That is a sensible design for a team plan with shared logins and an admin console. It is a strange default for one person's personal accounts, because it means a company you have never spoken to now holds the keys to your email, your bank, and your identity provider, encrypted or not.

You notice the trade the first time you read the privacy policy closely enough to ask: could this company technically open my vault if it wanted to, or was ordered to?

What "on device" means in Zen Passwords

Zen Passwords is built the other way. Your vault is encrypted on your iPhone, iPad, or Mac with AES-256-GCM, and the master password you choose is stretched with Argon2id before it ever unlocks anything. Unlocking happens on the device in your hand. We are not in that loop, and there is no "forgot your master password, we will reset it from our side" flow for the vault itself, because that kind of shortcut is exactly the back door this design exists to avoid.

Sync is optional, not assumed. Turn it on and your encrypted vault rides your own Apple ID through iCloud. Leave it off and the vault never leaves the device it was created on. Either way, it is live on the App Store today, not a future promise on a landing page.

What that looks like on an ordinary Tuesday

Design follows the same rule as the encryption model. Unlock with Face ID, copy the field you need, and the app stays quiet after that. There is no dashboard trying to upsell you mid-copy, and no screen you have to click through before pasting a password into a login form. The first thing the app asks of you is your master password, not your email address for marketing.

What the vault actually holds

  • Logins, cards, Wi-Fi keys, licenses, and notes, organized with folders and tags so it stays one vault instead of five apps
  • Two-factor codes stored next to the login they protect, plus a password generator for new accounts
  • Import from 1Password, Bitwarden, LastPass, Chrome, and generic files, previewed on device before anything is written
  • A free tier that works for trying a migration, with Zen Premium for unlimited active items when you outgrow it

What it does not do

  • If you forget the master password and skip the recovery steps you set up, Zen Passwords cannot open the vault for you. That is the boundary that makes zero knowledge real rather than a marketing word.
  • The free tier keeps a limited number of active items. A large vault will need Zen Premium or some archiving to stay fully unlocked.
  • It is built for Apple hardware, iPhone, iPad, and Mac. There is no Android or Windows app today.

Choose Zen Passwords if, stay on your current setup if

Choose it if your week runs on iPhone, iPad, and Mac, and you would rather keep logins in an encrypted vault than a browser autofill list or a note app. Stay where you are if you depend on cross-platform apps on Android or Windows, or on team sharing features that Zen Passwords does not offer yet. The Zen Passwords vs 1Password and Bitwarden comparison goes deeper on the security specifics if you want to compare line by line. And if what you are really weighing is the password manager already built into your iPhone, the vs Apple Passwords verdict names the exact line where the built-in one stops being enough.

If the phrase "zero knowledge" still feels like marketing rather than an engineering decision, Built so even we cannot open your vault walks through exactly what we can and cannot see. For what the app does today, see the Zen Passwords app page.

Start on the Zen Passwords app page for screenshots and the full feature list, then download on the App Store and move one account over tonight. Questions welcome at hello@zenproducts.ai.

Common questions

Can zenproducts read my Zen Passwords vault?

No. Zen Passwords is designed so unlocking happens on your device and we do not receive your master password or a copy of the vault we could decrypt. That is what a zero-knowledge boundary means in practice.

What happens if I forget my master password?

If you have not set up recovery steps of your own, we cannot open the vault for you. There is no vendor-side unlock path for the vault itself, on purpose: the same shortcut that would let us in for you is the one attackers would try to use.

Does Zen Passwords sync automatically?

No. Sync is optional. When you turn it on, your encrypted vault rides your own Apple ID through iCloud. If you leave it off, the vault stays on the single device it was created on.

Is there a free plan?

Yes. The free tier is meant to work for trying the app and testing a migration. Zen Premium removes the active-item limit for larger vaults.

KGFounder, zenproducts

KG and his team build every app under zenproducts, for iPhone, iPad, Mac and the browser. Every post is about software the team has built and measured.

More about the studio

Open the App Store listing directly on your iPhone.

View on the App Store
Keep reading

More posts from
the studio.

Bulk Delete3 min read

AI chat sidebars fill with hundreds of half-finished conversations, and deleting them one at a time is the reason nobody does. Bulk Delete adds selection to ChatGPT, Claude, and Gemini, runs locally in Chrome, and needs no account.

Zen SlateComparisonPrivacy3 min read

Apple Notes is good, and it syncs to iCloud by default for most people the moment they sign in. Zen Slate keeps notes on your device until you deliberately turn sync on. Here is an honest comparison of organization, editing, and where each app fits.

All posts

Everything we have published

Practical pieces on the apps, on-device design and the privacy decisions behind them.

Browse all posts