About SecureKeep
One person. One purchase. No server of ours.
SecureKeep is a local-only, zero-knowledge vault app for iOS and Android that holds the passwords, documents, notes, and recorded messages your family would need if something happened to you.
Everything is encrypted on the device with AES-256-GCM. There's no server of ours holding user data, no account to create, and no subscription. It's free to download, and a single $7.99 in-app purchase unlocks everything permanently.
Who builds SecureKeep
SecureKeep is built by Heston Dsouza at KCH Labs. It's a one-person operation: the same person writes the encryption code, answers support email, and publishes the blog posts. There's no team page because there isn't a team. That matters for a product like this one.
- 1 Writes the encryption code
- 1 Answers support email
- 1 Publishes the blog
A vault app asks you to trust an architecture you can't inspect from the outside, so the least we can do is tell you exactly who's behind it.
Support questions go to support@securekeep.app and reach the person who wrote the code. SecureKeep first shipped on the App Store and Google Play in 2026 and launched publicly on Product Hunt on 22 July 2026.
Why SecureKeep has no vault server
SecureKeep stores nothing on a server of ours because a server is the thing that gets breached.
Your master password never leaves the device. It's run through PBKDF2-SHA256 at 600,000 iterations to derive a key, and that key wraps a randomly generated data-encryption key which encrypts everything in the vault. When the app locks, the key is wiped from memory as thoroughly as the runtime allows.
The consequence is unavoidable and worth stating plainly: if you forget your master password, nobody can recover your vault, including us. We never hold the key, so there's no support ticket that can bring the data back.
That's the trade SecureKeep makes, and if it's the wrong trade for you, a hosted password manager with account recovery is the better tool.
How SecureKeep is funded
- $7.99 once, to unlock everything
- 0 subscriptions, ever
- 0 ads or venture funding
- 0 analytics SDKs in the app
SecureKeep is funded by people buying it once. The app is free to download with one vault and up to 10 items. Unlocking everything costs $7.99 as a single in-app purchase, and it never becomes a subscription.
There's no venture funding, no advertising, and no analytics SDK in the app. We collect no usage data from the app at all, which means there's no behavioural data to sell and no second revenue stream propping up the price. One purchase is the whole business model. It also explains why the roadmap is narrow: features get built when a paying customer needs them, not to hit a growth target.
What SecureKeep deliberately doesn't do
These are choices rather than gaps in the roadmap. Each one would require either a server or a browser extension, and both would undo the local-only architecture that the rest of the app depends on.
Doesn't do, on purpose
- Sync across devices
- Autofill in a browser
- Team or enterprise sharing
- Self-hosting
- A command-line tool
If you need cross-device sync or browser autofill, a subscription password manager will serve you better, and we'd rather say so up front than sell you something that doesn't fit.
Holds instead
- Documents: the will, the deed, insurance, IDs
- An emergency medical card
- Written instructions
- Video and audio messages for the people who'll need them
How to reach SecureKeep
Email support@securekeep.app for anything. There's no ticketing system and no chatbot in front of it.
- Email support@securekeep.app Bug reports, refunds, ideas, or how the encryption works.
- Contact form securekeep.app/contact It reaches the same inbox as email.
- In the app Settings › Help & Support › Send Feedback Report bugs, request features, or share feedback.