Mobile
Your whole vault. In your pocket.
Unlock with your face or your fingerprint. The credit card and passport even we can't read stay sealed behind a hardware-backed key. On iPhone and Android — synced by Clavitor, never locked to Apple or Google.
Beta · Coming soon
How it unlocks.
Biometric for daily use
Face ID, Touch ID, fingerprint, face unlock — whatever your phone offers. A glance or a touch, and you're in.
Passwords, API keys, and one-time codes open instantly. The credential stays inside your phone's secure hardware the whole time — it never sits in the open, even while the app is on screen.
A hardware-backed key for what we can't read
Identity fields — credit card, CVV, passport, SSN, recovery codes — only decrypt with a hardware-backed key. On most phones that's Face ID or your fingerprint — a PRF-derived key. Prefer a physical key? Tap a YubiKey to the back of the phone instead. Either path works.
The key is computed on the device, used once for that single field, then discarded. No one else can do this. Not malware on your phone. Not us. Not even the AI we use to support you.
Everything the vault does — on the phone.
01
System autofill
Fills passwords, passkeys, cards, and identities right in your browser and your apps — no copy-paste, no jumping between screens.
02
A full client, not a companion
Create, view, edit, and delete every entry type. Your phone does everything the web app does — it's a first-class Clavitor client.
03
Your 2FA codes, built in
TOTP codes live in the vault with a live countdown. One less app to carry, one less thing to lose.
04
Passwordless sign-in
Get in with your device — face, fingerprint, or security key. There's no master password to remember, forget, or phish.
05
Works offline
Your vault is cached on the phone and encrypted, so your everyday credentials are there with no signal at all. Identity fields still ask for your key.
06
Instant sync
Edit on the phone, see it on your laptop seconds later — through the nearest Point of Presence, no central queue in the middle.
07
Fast search
Find any entry by title, site, or username in a keystroke.
08
Password generator
Strong passwords and passphrases — the same engine as the web app and the CLI.
09
Share, safely
Send a single field with an encrypted, expiring link. Identity fields can't be shared — there's no key to hand over.
Only on Clavitor
What no other password manager does.
Biometric unlock and autofill are table stakes — everyone has them. These are ours alone.
Travel scope
Flip your phone to a curated handful of credentials — streaming, airline, hotel. The rest of your vault isn't empty (suspicious) — it's invisible. Cross a border, and nobody knows there's more.
You see what's locked
Every identity field wears a key symbol, so you always know exactly which secrets sit behind your hardware key. Other vaults give you one padlock on everything.
Agent activity, in your hand
See which AI agents read which credentials — when, and from where — right from your phone.
Revoke an agent in seconds
Grant or pull an agent's access to specific entries from your phone. Tap to confirm; it stops working immediately.
Your network, live
See the region you're connected to and how fast it is — Points of Presence across every continent, the closest one chosen for you.
No master password
There isn't one. Nothing to forget, nothing to phish, nothing to steal in a breach. Your device is the only way in.
Coming to iPhone and Android.
One vault, both phones, synced by Clavitor. The beta opens to free-tier users first.