Tuesday, 8:52 a.m. Security line at the airport. Your phone buzzes with a login you have not used in months. You unlock Zen Passwords with Face ID, copy the code, paste it, and put the phone away before the belt moves. Nothing left your pocket to do that.
That last sentence is the whole pitch of this article, and it is worth being precise about what "nothing left your pocket" actually means.
The default a lot of password managers ask you to accept
Plenty of password managers work well specifically because they assume the cloud first: create an account, verify an email, and your vault lives on somebody else's server from minute one. That is a sensible design for a team plan with shared logins and an admin console. It is a strange default for one person's personal accounts, because it means a company you have never spoken to now holds the keys to your email, your bank, and your identity provider, encrypted or not.
You notice the trade the first time you read the privacy policy closely enough to ask: could this company technically open my vault if it wanted to, or was ordered to?
What "on device" means in Zen Passwords
Zen Passwords is built the other way. Your vault is encrypted on your iPhone, iPad, or Mac with AES-256-GCM, and the master password you choose is stretched with Argon2id before it ever unlocks anything. Unlocking happens on the device in your hand. We are not in that loop, and there is no "forgot your master password, we will reset it from our side" flow for the vault itself, because that kind of shortcut is exactly the back door this design exists to avoid.
Sync is optional, not assumed. Turn it on and your encrypted vault rides your own Apple ID through iCloud. Leave it off and the vault never leaves the device it was created on. Either way, it is live on the App Store today, not a future promise on a landing page.
What that looks like on an ordinary Tuesday
Design follows the same rule as the encryption model. Unlock with Face ID, copy the field you need, and the app gets out of the way. There is no dashboard trying to upsell you mid-copy, and no screen you have to click through before pasting a password into a login form. The first thing the app asks of you is your master password, not your email address for marketing.
What the vault actually holds
- Logins, cards, Wi-Fi keys, licenses, and notes, organized with folders and tags so it stays one vault instead of five apps
- Two-factor codes stored next to the login they protect, plus a password generator for new accounts
- Import from 1Password, Bitwarden, LastPass, Chrome, and generic files, previewed on device before anything is written
- A free tier that is genuinely usable for trying a migration, with Zen Premium for unlimited active items when you outgrow it
What it does not do
- If you forget the master password and skip the recovery steps you set up, Zen Passwords cannot open the vault for you. That is the boundary that makes zero knowledge real rather than a marketing word.
- The free tier keeps a limited number of active items. A large vault will need Zen Premium or some archiving to stay fully unlocked.
- It is built for Apple hardware, iPhone, iPad, and Mac. There is no Android or Windows app today.
Choose Zen Passwords if, stay on your current setup if
Choose it if your week runs on iPhone, iPad, and Mac, and you would rather keep logins in an encrypted vault than a browser autofill list or a note app. Stay where you are if you depend on cross-platform apps on Android or Windows, or on team sharing features that Zen Passwords does not offer yet. The Zen Passwords vs 1Password and Bitwarden comparison goes deeper on the security specifics if you want to compare line by line.
If the phrase "zero knowledge" still feels like marketing rather than an engineering decision, Zero knowledge in plain English walks through exactly what we can and cannot see. For the fuller launch story and roadmap, read Introducing Zen Passwords.
Start on the Zen Passwords app page for screenshots and the full feature list, then download on the App Store and move one account over tonight. Questions welcome at hello@zenproducts.ai.