OpenKey Password Manager

Open Self-Hosting

In-app purchases

About this app

OpenKey is an encrypted password manager and password vault for iPhone and iPad. Save logins, autofill passwords, store 2FA authenticator codes (TOTP), payment cards, crypto wallets, passkeys, and developer secrets in one place. Your master password never leaves this device. End-to-end encryption (Argon2id + AES-256-GCM) runs on this device. If you connect a self-hosted OpenKey Server, the server stores ciphertext only — not your passwords, not your one-time codes, not your cards.

A password manager exists so you can stop reusing weak passwords. With OpenKey you generate a unique strong password for email, banking, social apps, work tools, and shopping sites, then Autofill fills the username and password when you sign in. OpenKey is also an authenticator app: add TOTP secrets, scan a QR code, and keep two-factor authentication (2FA) next to the login it protects. You do not need a separate 2FA app unless you want one.

Start offline. Create a vault with your email and a master password. No cloud account is required to use the local encrypted database. Airplane mode still unlocks the vault. Turn on biometric unlock (Face ID or Touch ID) so daily access is quick, while the master password remains the real key. Auto-lock closes the vault after the idle time you pick in Settings. You can block screenshots and screen recording while the app is open.

Each login can include a title, username, password, website, notes, tags, custom fields, attachments, and an icon. Collections group family, work, finance, or a project. Search filters the vault as you type. The password generator builds long random passwords so you are not inventing them by hand.

iOS AutoFill and Credential Provider: set OpenKey as the password manager for apps and websites, and use passkeys where the site supports them. Optional biometric confirmation before Autofill. On a computer, the OpenKey browser extension talks to the unlocked desktop app for autofill in Chrome, Edge, and Firefox.

Payment cards store the cardholder, number, expiry, and CVC inside the same encrypted vault. Crypto wallets store labels and addresses you need to pay or receive. Developer secrets hold API keys and tokens away from chat logs and screenshots.

Switching password managers: import Bitwarden JSON, Chrome CSV, LastPass CSV, 1Password CSV, and KeePass / KeePassXC (.kdbx). Export to the same family of formats when you need a copy on this device. Encrypted OpenKey backups use .okbak: the database, app settings, and attachments are packed and encrypted with your vault key. Restore decrypts that file and replaces the local vault. Keep the master password and the .okbak file offline. Nobody can open the backup without the password.

Self-hosted password manager: run OpenKey Server on your hardware or VPS, paste the URL in Settings, register or sign in, then sync. Only encrypted vault data moves. The server still cannot read plaintext.

OpenKey Pro is optional. The free password manager includes up to 50 logins, 3 collections, 3 cards, 3 crypto wallets, and 3 developer secrets. Pro removes those limits. Subscribe monthly or yearly, or buy lifetime access, through the App Store. Cancel anytime in Settings → Apple ID → Subscriptions. Pricing: https://openkey.openselfhosting.com/pricing

Privacy: OpenKey is a zero-knowledge password manager. We cannot read your vault. We cannot email you a password reset. If you forget the master password, the data stays sealed. Write the master password down and store it offline. Pair that with an .okbak backup.

Privacy policy: https://openkey.openselfhosting.com/privacy
Terms: https://openkey.openselfhosting.com/terms
Website: https://openkey.openselfhosting.com
Support: [e-mail]

Is OpenKey a free password manager? Yes, with the free-plan limits above.
Does this password vault work without internet? Yes. Autofill and the authenticator work offline after the vault is unlocked.

What’s new

Welcome to the first public release of OpenKey.

OpenKey is a self-hosted, end-to-end encrypted password manager. Your vault stays on devices you control — not on our servers.

Store and manage your logins securely with autofill and Nearby device pairing.