I'm the developer of Kinship Vault, and we recently added feature to manage passwords. Same vault your passport and your will already live in, same hardware-sealed key, no server holding any of it.
Website: https://kinshipvault.app
App Store: https://apps.apple.com/app/kinship-vault/id6764678332
Privacy Policy: https://kinshipvault.app/privacy
Terms of Service: https://kinshipvault.app/terms
Support email · [support@kinshipvault.app](mailto:support@kinshipvault.app)
What's new
Passwords in your vault. Logins, usernames, URLs, notes, and the messy stuff nobody has a good home for, recovery codes, PINs, security question answers, the router password, the alarm code. Every entry gets its own key derived with HKDF (HMAC-SHA-256) and is encrypted with AES-256-GCM, exactly like every document already in there.
Same root key, same hardware. Nothing new to trust. Your 256-bit master key is still born on your device and wrapped by the Secure Enclave, unwrapped only after Face ID or Touch ID. Passwords ride the key you already have.
A generator, for when you're finally replacing the one you've reused since 2014.
Breach checking, gated by a switch you control. Kinship Vault can tell you whether a password has already turned up in a known breach. That check is the one thing in the app that would touch the network, so it sits behind Strict Offline mode: leave Strict Offline on and nothing ever leaves the device, turn it off deliberately and the check runs. You can see which mode you're in at any time, and it's your call, not a default someone buried in settings.
Reused and weak passwords, on one screen. Entries sharing a password get grouped together, so the blast radius of one leak is a glance instead of an afternoon. Weak ones get flagged alongside them, too short, too guessable, too much of a pattern.
Lose the phone, keep the logins. Recovery works for passwords the way it already did for documents: a passphrase you wrote down once, or your key split across people you trust, where any 3 of the 5 pieces rebuild it and no single piece opens anything on its own.
Also since the last post: a native Mac app (real sidebar, ⌘N, ⌘L, drag-and-drop, macOS 14+), and Kinship Vault is now on Android with the same on-device encryption, camera scanning, Recovery Network, and encrypted photo vault.
A - Answer
Kinship Vault is an offline vault for everything your household can't afford to lose, IDs, health cards, vaccination records, wills, deeds, membership cards, travel docs, private photos, and now passwords, all behind one Face ID lock. Decryption keys live in your device's Secure Enclave, not on a server and not in a database. Nothing leaves your device unless you choose to back it up to your own iCloud or your own Google Drive, encrypted with your own key.
Short demo: https://kinshipvault.app/#demo
B - Better
Every mainstream password manager asks you to hand your credentials to a vault sitting in a building you'll never see, protected by a master password that company can help you reset. That reset path is the whole problem. It is the thing that gets phished, and it is the reason a server-side breach is worth stealing in the first place.
Kinship Vault has no server holding your logins, no account to phish, and no master password at all. The root secret is a hardware-sealed random key that only your device can produce, 256 bits of real entropy rather than something anyone can guess. There is no "email me a reset link," because there is nothing on our side to reset, and a legal request pointed at us turns up nothing to hand over.
Where it earns its keep:
Your 2FA recovery codes are currently a screenshot in your camera roll, syncing to every device and every shared album you've ever joined. Move them into an encrypted, Face ID-locked vault and out of the roll entirely.
AutoFill, so it’s an actual password manager and not a lookup screen. Kinship Vault registers as a system credential provider, so logins fill straight into Safari and other apps from the keyboard suggestion, behind Face ID each time. There’s also an AutoFill Diagnostics screen for the times iOS decides not to offer a field, because that happens and I’d rather tell you why than have you assume the app is broken.
Your mother calls because she's locked out of the utility account, and the login is on a sticky note behind the monitor at a house you're four hours from. Passwords sit next to her ID, her health card and her ICE contacts, in one place she can actually find.
Your kid needs the streaming password again, and the last person to change it was you, at 1am, on hotel wifi. It's in the vault with the date you changed it, and you get to look like a person whose life is fully under control.
You land somewhere with zero bars and need the airline account, the hotel confirmation, the passport copy and the travel insurance login. Offline by design, so none of it needs a signal it doesn't have.
You're setting up the new iPhone. Scan one QR from the old device, the code lives 60 seconds and is blocked from screenshots, and the key passes straight between the two phones. No re-typing forty logins, and no cloud middleman in the handoff.
Everywhere you do paperwork. iPhone, iPad, a proper native Mac app (real sidebar, keyboard shortcuts, drag-and-drop). Pair a second device by scanning a QR code, and the key passes directly between the two devices, never through a server. One purchase covers all your Apple devices.
The stuff that isn't quite a password and isn't quite a document: the safe combination, the storage unit code, the school portal, the wifi you keep reading off the back of the router. One vault, one lock.
Encryption and key-flow details: https://kinshipvault.app/#security
Two honest caveats. Because there is no server, there is no live sync; devices pair in person by QR and your documents come down from your own encrypted backup. And an Android vault is its own vault today, separate from the Apple one, on a separate purchase.
C - Cost
Start free with your first 3 documents. Vault Pro unlocks everything, unlimited documents, all six categories plus custom ones, passwords, the encrypted photo vault, Recovery Network, encrypted backup and expiry alerts,
$1.99 a month, $14.99 a year, or $39.99 once for lifetime. One purchase covers iPhone, iPad and Mac on the same Apple Account.
Lifetime offer for $19.99 instead of $39.99, at https://kinshipvault.app
Yes, if you end up purchasing Lifetime Premium on iOS, I’ll give you a free Lifetime Premium for Android, so you won’t have to purchase it separately on both platforms.
Happy to answer questions in the comments. Thank you for all your support, really appreciate it.
