Frequently asked questions

SecureKeep uses AES-256-GCM encryption, the same standard banks use. Your master password is processed through PBKDF2-SHA256 with 600,000 iterations to derive your encryption key.

No. SecureKeep uses a zero-knowledge architecture. Your data is encrypted on your device with your master password, which we never see or store. If we can't access it, neither can anyone else.

Your data cannot be recovered. This is by design: it's what makes your vault truly private. Write your master password down and store it somewhere safe, separate from your device.

Never. Everything stays on your device. There are no accounts, no cloud storage, and no tracking. SecureKeep doesn't even have a server that could receive your data.

An instant security feature: place your phone face down on any surface and your vault locks immediately. Think of it as a panic button in your pocket.

Go to Settings and toggle on Biometric Unlock. You'll confirm with your master password once, and after that Face ID or your fingerprint can unlock that vault. Your master password always stays as a fallback, and biometrics are enabled per vault.

Open Settings > Auto-Lock Timeout and choose 1, 5, 15, or 30 minutes of inactivity. SecureKeep also locks immediately whenever you switch away from the app, and you can lock on demand any time with Lock Now in Settings.

In Settings, enable Lock when face down. After that, placing your phone face down on a surface locks your vault instantly. There's a brief grace period so a quick flip doesn't lock you out by accident.

Go to Settings > Change Master Password. You'll enter your current password and a new one, and SecureKeep re-encrypts your vault key with the new password. Choose one you'll remember — there's still no way to recover a vault if its master password is lost.

The lock screen rate-limits attempts. After repeated wrong guesses it imposes a growing lockout (30 seconds, then a minute, then five minutes) that survives closing and reopening the app. Failed biometric attempts count too. It's there to make brute-forcing impractical.

On Android, SecureKeep blocks screenshots and screen recording of vault content. On iOS, Apple doesn't let apps block screenshots, so instead SecureKeep hides your vault behind a privacy screen in the app switcher. On both platforms, your content is hidden whenever the app is in the background.

From the dashboard, tap the + button and choose Add a Password. Enter a label (like "Chase Bank"), the username and password, and an optional URL, then tap Save. It's encrypted before it's ever stored. The whole thing takes well under a minute.

When adding or editing a password, open the Two-Factor Authentication section. Paste your TOTP Secret (the setup key the website gives you, often shown beneath the QR code) and any Backup Codes, one per line. Both are masked and encrypted. Note: SecureKeep safely stores your TOTP secret and backup codes, but it doesn't generate the rotating 6-digit codes itself, so keep using your authenticator app for everyday sign-ins. This keeps the secret and recovery codes in one safe place so they're never lost.

While adding or editing a password, open the Security Questions section and tap Add Security Question. Pick a question from the preset list or write your own, then enter the answer. Answers are masked and encrypted, so they stay hidden until you tap to reveal them.

Two ways. While adding or editing a password, tap Generate next to the password field for an instant strong password. Or open Settings > Password Generator to build one on its own. Adjust the length and character types, then copy it. Passwords are created using your device's secure random generator.

Tap the copy icon next to any password. SecureKeep copies it and automatically clears your clipboard after 30 seconds, so it doesn't linger where another app could read it. You'll see a "Copied! Clears in 30s" confirmation.

From the dashboard, tap + and choose Add a Document, then pick a file from your device or Files. SecureKeep supports PDF, JPG, and PNG up to 10 MB each. The file is encrypted on your device's disk. The original stays wherever you chose it from.

Tap + on the dashboard and choose Add a Note. Give it a title, type the body, and optionally pick a category. The title stays searchable; the body is encrypted.

Open the emergency card from your dashboard and fill in the sections: medical info, emergency contacts, insurance, and physician details. Save it, then use Export to produce a PDF or image you can print or share. Because an exported card leaves your encrypted vault, the app reminds you to handle it carefully.

Every list (passwords, documents, notes, and messages) has a search bar at the top plus category filters. Start typing to narrow the list instantly, or tap a category to see just those items. Pull down on any list to refresh it.

On any list, tap Select (or long-press an item) to enter multi-select, then tap the items you want, or use Select All, which respects the filter you're viewing. Deleting asks you to type DELETE to confirm, so nothing goes by accident.

Use the vault picker to move between vaults. Each vault has its own master password, so switching means unlocking the one you want. You can rename or delete vaults from there too.

Rename a vault from the vault picker, and delete one from either Settings > Delete Vault or the manage-vaults screen. Deleting is permanent and asks you to type DELETE to confirm. There's no cloud copy to fall back on, so make a backup first if you might want it later.

You can create a separate vault for each person you trust: a spouse, a parent, a child. Each vault has its own master password and contains only the information that person would need.

A digital card stored in your vault containing your medical information, emergency contacts, insurance details, and physician info. You can export it as a PDF or image to print or share.

Yes. The recorder shows a live timer, level meter, and pause/resume controls so you can take your time. Playback supports scrub, ±15s skip, and adjustable speed. Recordings are encrypted on the way in and stored in your vault, so you can leave your voice alongside your information. Long recording sessions don't trigger auto-lock.

Passwords (with usernames, URLs, security questions with masked answers, TOTP secrets, and backup codes, both kept hidden behind a tap), documents (PDF, JPG, PNG up to 10MB), secure notes, video and audio messages, and emergency cards with medical and contact information.

Yes. SecureKeep imports CSV exports from Chrome, Edge, Brave, Apple Passwords, LastPass, Bitwarden, 1Password, and Dashlane. From the dashboard, tap Import Passwords (CSV), or use the import icon on the credentials list. Pick your file and SecureKeep imports everything in a single transaction. Duplicates are detected and skipped automatically. The CSV file never leaves your device.

First-time users are walked through a 6-step guided setup: name the vault, pick a master password, enable biometric unlock (optional), add your first password, create your first backup, and finish. Steps you'd rather skip can be skipped, and you can always come back to them later.

SecureKeep analyzes every password in your vault for strength, reuse, and age. You get a health score and can see which passwords need attention: weak ones, duplicates, or ones you haven't changed in a long time.

Go to Settings > Backup & Restore. Create an encrypted backup protected by a separate passphrase (different from your master password). The backup is saved as a .securekeep file you can store wherever you choose.

Two different secrets that protect two different things. Your master password unlocks the vault itself. You set it when you created the vault, and you use it every time you sign in. Your backup passphrase only protects a .securekeep backup file. You set it fresh each time you make a backup, and it's only used to open that file. Restoring a backup gives you the vault back, but you still need the original master password to unlock it.

Without a backup, your vault is lost with the device. That's why we recommend creating regular encrypted backups. With a backup file and your backup passphrase, you can restore your vault on any device.

Yes. Create an encrypted backup on your old device, transfer the .securekeep file to your new device (via AirDrop, email, USB, etc.), then restore it in the app using your backup passphrase.

They need both. The backup passphrase opens the .securekeep file you send them; the original master password unlocks the vault inside. Send them through different channels (for example, the file via AirDrop and the passwords in person or by phone) so a single intercepted message never gives away access. Step-by-step instructions are in the app at Settings > Help & Support > Share Vault Access.

Yes. When you restore a backup, it's imported as a new vault alongside your existing vaults, and nothing is overwritten.

Nothing's wrong: those are two different passwords. The backup passphrase already did its job by decrypting the .securekeep file so the vault could be imported. To unlock the vault, you need the original master password from the vault that was backed up. If someone else sent you the backup, ask them to share the master password too, since the backup passphrase alone isn't enough.

Deleting the app deletes your vaults with it. Everything lives only on your device, so there's no cloud copy to restore from. Make an encrypted backup first (Settings > Backup & Restore) if you plan to reinstall or move to a new device.

Not automatically. There's no cloud account and nothing syncs in the background. That's the trade-off for true zero-knowledge privacy. To use your vault on another device, create an encrypted backup and restore it there with your backup passphrase.

$7.99, one time. No subscriptions, no in-app purchases, no hidden fees. You buy it once and own it.

There isn't a free trial, but both the App Store and Google Play have refund policies if SecureKeep isn't right for you.

SecureKeep runs on iPhone and iPad (iOS) and on Android phones and tablets. Because everything is stored locally, each device keeps its own vault unless you move one over with an encrypted backup.

Refunds are handled by the store you purchased from. Request one through Apple at reportaproblem.apple.com, or through the Google Play refund process. If something isn't working, reach out first via Settings > Help & Support > Send Feedback, and we may be able to fix it.

The quickest way is Send Feedback in Settings > Help & Support, where you can report bugs, request features, or share feedback right from the app. You can also visit our contact page or email support@securekeep.app. We respond within 1–2 business days.