Keybound
A local-first password manager for macOS, iOS and Android. There is no account, no server and no sync service. Your vault is a single encrypted file on your device, and the only thing that opens it is your master password.
A password manager with no account and no server.
Argon2id at 64 MiB and t=3 derives your key; XChaCha20-Poly1305 encrypts the vault. Envelope encryption means a random vault master key encrypts the body, and each unlock method — password, recovery key, biometric — stores its own wrapped copy, so adding a recovery key never weakens the password path.
All cryptography lives in Rust. The interface receives decrypted entries only when it needs them, and never the master key, TOTP seeds or passkey private keys.
Two devices sync directly to each other over your own local network, authenticated with an ephemeral key exchange and a six-digit code you confirm on both screens. There is no relay and no server in the middle, because none exists.
What it does
Argon2id key derivation and XChaCha20-Poly1305 encryption, with envelope-wrapped unlock methods.
Logins, TOTP codes, secure notes, cards, identities, SSH keys, API keys, licences and recovery keys.
A dashboard for weak, reused and stale credentials, plus a generator.
Uses k-anonymity: only the first five characters of a password's hash ever leave your device.
Bitwarden, 1Password, KeePassXC, LastPass and browser CSV exports, plus encrypted export and import.
LAN sync with QR pairing and a six-digit verification code. No relay, no cloud, no account.
This app collects no data
Keybound collects nothing. There is no sign-up, no email address, no device identifier, no usage analytics, no crash reporting and no advertising.
Details
| Category | Utilities |
|---|---|
| Platforms | iOS, Android, macOS |
| Availability | In development |
| Bundle identifier | com. |
| Account required | No — there is no sign-up or login |
| Data collected | None |
| Privacy policy | flowlabapps. |
| Support | flowlabapps. |