The vault for people who cannot afford a leak.
Passwords, passkeys, 2FA codes, secure notes, seed phrases, and API tokens — encrypted on your device, controlled by you alone. No NoirLock account. No NoirLock servers. Nothing to breach.
Everything, sealed in one vault
Why NoirLock
Nothing to trust. Nothing to breach.
Zero-knowledge
Without your master password and Secret Key, no one reads your vault — not us, not anyone with access to your iCloud, not anyone holding your device.
Local-first
Every record is encrypted on your device before it ever touches iCloud. NoirLock works fully offline — sync is a bonus, not a dependency.
No account, no servers
There is no NoirLock login and no NoirLock server to breach. Sync happens only through your own private iCloud, encrypted, end to end.
No tracking, ever
No analytics, no trackers, no advertising. Your vault activity is never logged, previewed, or sent anywhere it doesn’t belong.
Inside the vault
Built for discipline, not drama.
The Vault
Instant Unlock
Encryption & Authenticator
Password Generator
Categories & Tags
AutoFill Everywhere
Private iCloud Sync
Security
Built on principles, not promises.
NoirLock makes no claim of being unhackable. What it offers instead is a specific, verifiable architecture — and the honesty to explain its trade-offs.
Encryption
Every record is sealed with AES-256-GCM authenticated encryption. Tampered data fails authentication instead of decrypting.
Per-item keys
Every vault item gets its own random 256-bit encryption key, separately wrapped by the vault key. Records stay isolated from each other.
Key derivation
Argon2id (64 MiB, 3 passes) from your master password, combined with an independent 256-bit Secret Key (prefix NL-SK-) that only you hold.
Biometric unlock
Face ID and Touch ID are bound to your device’s Secure Enclave — the key that opens your vault never leaves the chip.
Key storage
Cryptographic keys live in the system Keychain, never in plain files.
Sync
Your own private iCloud (CloudKit). Only already-encrypted payloads ever leave the device.
AutoFill
The AutoFill extension never receives the main vault database — it works from a separate encrypted projection, and deceptive lookalike domains are rejected.
119 / 119
Automated tests passed
Full unit, integration, and security regression suite — July 15, 2026.
10 / 10
Release gates completed
From physical-device security flows to two-device sync verification.
Reviewed
Independent security review
Completed July 2026 — no critical vulnerabilities within the reviewed scope.
A deliberate trade-off
There is no server-side account recovery. Losing both your master password and Secret Key means losing access to your vault permanently. This is the architectural cost of zero-knowledge design: no one, including NoirLock, can decrypt your data as a fallback — because no one but you was ever able to.
Platforms
One vault, every Apple device.
A single SwiftUI codebase carries NoirLock across iPhone, iPad, and Mac — with macOS embracing native split views and a sidebar built for the desktop.
iPhone
The full vault, Face ID unlock, and AutoFill in your pocket.
iPad
The same secure vault, tuned for a larger screen.
Mac
Native split views and a sidebar — a desktop app, not a stretched phone screen.
Available in 12 languages
FAQ
Straight answers.
Does NoirLock have an account or a cloud login?
No. There is no NoirLock account and no NoirLock server. Your vault lives on your device, and syncing between your own devices happens through your private iCloud.
What happens if I forget my master password or lose my Secret Key?
There is no password reset. Losing both your master password and Secret Key means losing access to your vault permanently. This is the deliberate trade-off of a zero-knowledge design — nobody, including NoirLock, holds a spare key to your data.
Where is my data actually stored?
Encrypted, on your device. If iCloud sync is enabled, encrypted records also live in your own private iCloud container — never on infrastructure operated by NoirLock, because none exists.
Does NoirLock track or profile me?
No analytics, no trackers, no advertising. Nothing about your vault or its contents is ever collected or observed.
Own your secrets
Take back what’s yours.
NoirLock isn’t a place to store passwords. It’s where you keep the things that would cost you the most to lose — under your control, and no one else’s.
iPhone, iPad & Mac · Apple Silicon & Intel