Passwords, recovery phrases, API tokens, bank cards, identity documents, SSH keys, passkeys, and two-factor codes — encrypted on your own Apple devices, never on our servers, because there are none. No account. No cloud login. No company standing between you and your secrets.
Everything, sealed in one vault
Why NoirLock
Without your master password and Secret Key, no one reads your vault — not us, not anyone with access to your iCloud, not anyone holding your device.
Every record is encrypted on your device before it ever touches iCloud. NoirLock works fully offline — sync is a bonus, not a dependency.
There is no NoirLock login and no NoirLock server to breach. Sync happens only through your own private iCloud, encrypted, end to end.
No analytics, no trackers, no advertising. Your vault activity is never logged, previewed, or sent anywhere it doesn’t belong.
What fits inside
Every kind of record gets fields built for it — and any entry can carry encrypted file attachments, synced only through your own iCloud.
Login
Username, password, URLs, TOTP
Secure Note
Free-form text, fully encrypted
Access Code
PINs, door codes, safe combinations
Recovery Phrase
Seed phrases and backup codes
API Token
Keys, secrets, service credentials
Bank Card
Number, expiry, CVV, PIN
Contact
Private contact details
Identity Document
Passport, ID card, licence
Wi-Fi Network
SSID, security type, key
Software License
License keys and seats
Crypto Wallet
Addresses and wallet secrets
Membership
Loyalty and member numbers
SSH Key
Private key, public key, passphrase
Passkey
Phishing-resistant sign-in
Custom Secret
Your own fields, your own shape
Attachments
Encrypted files on any entry
Everyday control
Built-in offline checks draw on 10 million common breached passwords. Get a warning as you type or paste. The generator screens candidates before showing, copying, or inserting them. No database download. No passwords, hashes, or prefixes sent anywhere.
Explore the full Security CenterKeep multiple websites under one login. Suggest it for a domain and its subdomains, an exact host, or nowhere. With automatic upgrades enabled in Standard AutoFill mode, compatible sites and apps can add a passkey after a recent password sign-in.
On iOS 18 or later, insert a saved username, password, or verification code from a text field’s AutoFill menu. Open authenticator setup links in NoirLock and save a code as a new item or add it to an existing login.
Build nested categories. Move branches, collapse the tree, and drag entries into your own order. Your structure syncs across devices. Travel Mode hides a selected category together with every category beneath it.
Password-protected encrypted backups include file attachments and nested categories. Import earlier backups, recover deleted entries, and preserve your structure.
Inside the vault
The Vault
Instant Unlock
Encryption & Authenticator
Password Generator
Categories & Tags
AutoFill Everywhere
Private iCloud Sync
Migration
Bring your existing vault with you. File imports are parsed on your device, with duplicate review before saving. On supported systems, Credential Exchange gives you a direct route between compatible apps.
Transfer passwords, passkeys, and verification codes directly between NoirLock and compatible password managers, including Apple Passwords. Credential Exchange uses the system transfer flow without a plaintext export file. Available on iOS 26, iPadOS 26, and macOS 26 or later.
01
Every item is shown to you first. Nothing is written into the vault until you say so.
02
Likely duplicates are detected and marked. Merge or skip them one by one.
03
Large imports offer progress, cancellation, and 10 minutes to undo newly created entries. Fill-ins merged into existing entries remain. If cleanup is interrupted, unresolved entries stay tracked for recovery.
Hardened Mode
Auto-lock, manual lock, a privacy cover when the app moves to the background, and an optional local-only clipboard. When you want the strictest posture without hunting through settings, Hardened Mode applies all of it in a single switch.
No analytics. No tracking. No advertising.
Border crossings, coerced unlocks, a device that falls into the wrong hands, a secret that should not outlive its purpose — Pro is built for the situations where a password field is not the problem.
Featured Pro protection
On-device shoulder-surfing protection. When another face appears in the camera frame, NoirLock can hide sensitive content or lock the vault automatically.
Face detection happens entirely on your device. Camera frames are never saved or transmitted, and NoirLock does not identify people.
On iPhone, iPad, and Mac, Privacy Eye is off by default. You enable it separately on each device and explicitly grant camera access; while it runs, the system shows the standard camera-use indicator.
Privacy Eye works alongside Face ID, Touch ID, and auto-lock. For reliable face detection, use good lighting and keep faces visible and within the camera’s field of view.
Included with annual and lifetime ProA cryptographically isolated area behind its own second password, with its own recovery key. Nothing inside it appears anywhere in the main vault.
Hide chosen categories across the entire app before a border crossing. Armed and disarmed only from inside Private Space, so nothing on the device reveals that it is on.
A separate code opens a decoy vault while the real vault stays sealed. Using it disables biometric unlock and revokes AutoFill access on this device. Real entries, attachments, and drafts stay isolated from the decoy.
Erase this device’s vault after too many failed unlock attempts, then restore it later from your own iCloud.
Set a date after which an item deletes itself on every one of your devices. Useful for anything that should not outlive its purpose.
Let a trusted person reach chosen categories after a waiting period you set — so a vault built to resist everyone does not also outlive you.
Share an item through an end-to-end encrypted link with expiry, view limits, and revocation. Choose recipients you trust, as they can keep a copy of the shared information.
How Pro is priced
NoirLock Pro is an auto-renewing annual subscription with a 14-day free trial, or a one-time lifetime purchase. Prices in your local currency are shown before you buy. Subscriptions renew automatically unless auto-renew is turned off at least 24 hours before the current period ends, and can be managed or cancelled in your Apple Account settings.
Everything else in NoirLock stays free, with no limit on the number of entries.
Security
NoirLock makes no claim of being unhackable. What it offers instead is a specific, verifiable architecture — and the honesty to explain its trade-offs.
Encryption
Every record is sealed with AES-256-GCM authenticated encryption. Tampered data fails authentication instead of decrypting.
Per-item keys
Every vault item gets its own random 256-bit encryption key, separately wrapped by the vault key. Records stay isolated from each other.
Key derivation
Argon2id (64 MiB, 3 passes) from your master password, combined with an independent 256-bit Secret Key (prefix NL-SK-) that only you hold.
Biometric unlock
Face ID and Touch ID are bound to your device’s Secure Enclave — the key that opens your vault never leaves the chip.
Key storage
Cryptographic keys live in the system Keychain, never in plain files.
Attachments
Files attached to an entry are encrypted with the same per-item architecture and sync only through your own private iCloud.
Private Space
A separate key hierarchy behind its own password and recovery key. Unlocking the main vault does not unlock it.
Sync
Your own private iCloud (CloudKit). Only already-encrypted payloads ever leave the device.
AutoFill
The AutoFill extension never receives the main vault database — it works from a separate encrypted projection, and deceptive lookalike domains are rejected.
365 / 365
Automated tests passed
Full unit, integration, and security regression suite — August 2026.
10 / 10
Release checks passed
From physical-device security flows to two-device sync verification.
Reviewed
Independent security review
Completed July 2026 — no critical vulnerabilities within the reviewed scope.
A deliberate trade-off
There is no server-side account recovery. Losing both your master password and Secret Key means losing access to your vault permanently. This is the architectural cost of zero-knowledge design: no one, including NoirLock, can decrypt your data as a fallback — because no one but you was ever able to.
Platforms
A single SwiftUI codebase carries NoirLock across iPhone, iPad, and Mac — with macOS embracing native split views and a sidebar built for the desktop.
The full vault, Face ID unlock, and AutoFill in your pocket.
The same secure vault, tuned for a larger screen.
Native split views and a sidebar — a desktop app, not a stretched phone screen.
Available in 12 languages
FAQ
No. There is no NoirLock account and no NoirLock server. Your vault lives on your device, and syncing between your own devices happens through your private iCloud.
There is no password reset. Losing both your master password and Secret Key means losing access to your vault permanently. This is the deliberate trade-off of a zero-knowledge design — nobody, including NoirLock, holds a spare key to your data.
Encrypted, on your device. If iCloud sync is enabled, encrypted records also live in your own private iCloud container — never on infrastructure operated by NoirLock, because none exists.
Yes. Import CSV and 1PUX files from supported password managers, review items, and merge or skip duplicates. A 10-minute Undo removes newly created entries; merged fill-ins remain. On OS 26 or later, Credential Exchange also transfers supported credentials directly between compatible apps.
Pro adds Privacy Eye, Private Space, Travel Mode, Duress Unlock, Panic Wipe, self-destructing entries, Emergency Access, and Secure Sharing. Everything else in NoirLock stays free, with no limit on the number of entries.
No. Privacy Eye uses on-device face detection only to determine whether an additional face is present. Camera frames remain in memory, are never saved or transmitted, and no face recognition or identity matching is performed.
One switch applies the strictest options at once: iCloud sync off, AutoFill at maximum security, a local-only clipboard, and an immediate lock whenever the app moves to the background.
No analytics, no trackers, no advertising. Nothing about your vault or its contents is ever collected or observed.
Own your secrets
NoirLock isn’t a place to store passwords. It’s where you keep the things that would cost you the most to lose — under your control, and no one else’s.
iPhone, iPad & Mac · Apple Silicon & Intel