We're here to help.

I forgot my Master Password. Can it be recovered?

No — and that's by design. Your Master Password is never stored or sent anywhere, so no one (including the developer) can recover it. Use your Recovery Key, saved when you first set up the vault, to regain access on a new device.

Where is my data stored?

Everything is encrypted and stored on your device. If you turn on iCloud sync or backup, an already-encrypted copy is kept in your own private Apple iCloud. The developer runs no server and never receives your data.

Does AutoFill work in other apps?

Password AutoFill works across Safari and apps that support the iOS AutoFill system. The "Save from Safari" prompt captures logins on websites in Safari only — iOS does not allow capturing credentials from inside other apps.

How do I move my passwords in from another manager?

Two ways. On iOS 26, the system transfer is the safest: in the other app choose "Export" or "Transfer Passwords" and pick VAULT as the destination — passwords and passkeys move straight across, encrypted, without ever becoming a file. Otherwise, Settings › Import reads a CSV exported from Chrome, Edge, 1Password, LastPass or Bitwarden.

Re-importing is safe: a login for the same site and username is updated rather than duplicated, and the previous password is kept in that item's password history.

Can I move my passwords out again?

Yes — it's your data. On iOS 26, the All folder's Export button hands your logins to another password manager through the system transfer. Settings › Export to CSV produces a file for anything that can't do that. A CSV is plain text and is not encrypted, so treat it carefully and delete it once you've imported it. For keeping a safe copy, use the encrypted backup instead — it stays protected by your passphrase.

What are passkeys, and how do they work here?

A passkey replaces a password with a pair of cryptographic keys. The website keeps the public half; the private half stays in your vault. Signing in is just Face ID — there is no password to type, copy, phish, or leak. Vault Secure can create new passkeys when a site offers one, store passkeys you transfer in from another manager, and sign you in with them. You'll find them all in the Passkeys section on the home screen.

How do I add a two-factor (2FA) code?

Open the Authenticator from the home screen and tap +. You can scan the QR code the website shows, or type the setup key by hand (spaces don't matter). Codes then refresh every 30 seconds in the app — and on the login itself. The camera is used only to read that QR code; no photo is saved or sent.

How do I delete everything?

Settings › Delete Vault Permanently erases all data, with the option to remove the iCloud copy too. Deleting the app also removes its on-device data.