ZECURI

Zecuri is a privacy-focused password manager for iPhone and iPad. In version 1.0, your vault lives on your device: passwords are encrypted locally with industry-standard cryptography before they are saved. Only you hold the master password that unlocks them.

**What Zecuri v1.0 includes:**

• Local password vault — Create, view, edit, and delete login entries (title, URL, username, password, notes).

• On-device encryption — Vault data is encrypted with AES-256-GCM via Apple CryptoKit. Your master password is stretched with Argon2id (memory-hard KDF) to derive the encryption key. The master password is never sent to any server.

• Search — Find entries by title, URL, or username.

• TOTP codes — Store an otpauth:// URI on a login and view the current 6-digit code in the app.

• Biometric unlock — Optionally unlock with Face ID or Touch ID after your first master-password unlock.

• Two-factor for vault unlock — Optionally require a hardware security key (WebAuthn) or recovery code in addition to your master password.

• Encrypted backup — Export your vault as an encrypted backup file (separate backup password). Import a backup to restore on a new device.

• CSV import — Bring in logins from Bitwarden, 1Password, LastPass, Chrome, or KeePassXC export files.

• Password AutoFill extension — Optional iOS Credential Provider extension. Enable it in Settings → Passwords → AutoFill Passwords, then pick Zecuri. Requires master-password or biometric re-authentication per fill.

**How it works (v1.0):**

1. Create a master password (minimum 12 characters). It stays on your device.
2. Zecuri derives an encryption key with Argon2id and encrypts your vault with AES-256-GCM.
3. Encrypted vault files are stored in the app's secure container (App Group + Keychain for session state).
4. Lock the vault when you're done. Re-enter your master password (or use biometrics) to unlock.

**Security & privacy (v1.0):**

• AES-256-GCM vault encryption (Apple CryptoKit)
• Argon2id key derivation (64 MiB, t=3, p=4)
• Master password and derived keys never transmitted
• No analytics, no telemetry, no ads
• Works fully offline — no account or internet connection required in v1.0
• Built by Linespotting AB (Sweden)

**Not in v1.0 (planned for later releases):**

• Cloud sync between devices or with the Zecuri Chrome extension
• Password generator
• Credit-card and identity record types (data model exists; UI not yet)
• Tags and advanced organization
• Passkey/WebAuthn credential storage in the vault

**Requirements:**

• iOS 16+
• No iCloud Keychain required
• Internet not required for core vault features in v1.0

**Support & legal:**

• Privacy Policy: https://zecuri.com/legal/privacy
• Terms of Service: https://zecuri.com/legal/terms
• Support: https://zecuri.com/support
• Contact: privacy@zecuri.com