forcekeyper
Strong passwords and 2FA codes that never leave your device. An offline-first password generator, vault, and authenticator for iPhone and iPad — no servers, no accounts, no tracking.
Free · Requires iOS 15+ · iPhone & iPad
Core Features
🔐 Strong Password Generator
Cryptographically secure randomness with rejection sampling and a Fisher–Yates shuffle. Toggle character sets, pick symbol presets or your own, exclude ambiguous glyphs, and watch a live entropy strength meter. Length 4–30, or up to 128 in hex mode.
🗝️ Face ID Vault
Save passwords behind Face ID / Touch ID. Everything is masked by default and only revealed after biometric confirmation. A single-slot previous-password safety net protects you when a reset doesn't actually take effect on the site.
🔢 Built-in Authenticator
A full RFC 6238 TOTP authenticator. Live 6-digit codes shown as 123 456 with a draining countdown ring, computed purely from the secret and system clock — no network, no server state.
📋 Auto-expiring Clipboard
Copies use the native pasteboard with a ~40-second expiration so iOS clears secrets on its own, plus local-only mode so nothing syncs to your other devices via Universal Clipboard or Handoff.
☁️ iCloud Keychain Sync
Optional, user-toggleable recovery through Apple's end-to-end-encrypted iCloud Keychain. Your saved passwords and 2FA seeds reappear on a new device signed into the same Apple Account — with no server operated by us.
💾 Encrypted Backup
Export a single passphrase-encrypted .frbak file secured with AES-256-GCM (Apple CryptoKit) and PBKDF2 key derivation. Import it later to merge or restore. The passphrase is never stored anywhere.
Import Your 2FA in Seconds
📷 Scan a QR
Point the camera at any standard otpauth:// setup QR to add an authenticator code. Algorithm, digits, and period are honored, with safe RFC defaults when unspecified.
⬇️ Google Authenticator Import
Scan Google Authenticator's multi-account “export accounts” QR and bulk-import every TOTP account at once, each auto-linked to a matching saved entry or added on its own.
⌨️ Enter Manually
No camera? Type a base32 secret with optional issuer and account, validated inline. Great for the classic “can't scan? enter this key” setup flow.
Security & Privacy by Design
📴 100% Offline
No servers, no account, no network calls. No analytics, ads, tracking identifiers, or crash reporting. The app works fully in Airplane Mode. App Privacy: Data Not Collected.
🙈 Anti-shoulder-surfing
A branded privacy overlay covers the app in the App Switcher so snapshots never expose a password. The trusted session drops whenever the app leaves the foreground, forcing re-authentication on return.
🍎 Apple-native Crypto
Secrets live in the iOS Keychain. Encryption is provided entirely by Apple's OS — Keychain, CryptoKit AES-GCM, and CommonCrypto PBKDF2 — so the app qualifies for the export-compliance exemption.
Your keys. Your device. Full stop.
forcekeyper was built on a simple principle: a tool that holds your most sensitive secrets should never be able to see them. There is nothing to sign up for, nothing uploaded, and nothing for us to lose. Prefer the browser? The free web-based generator runs entirely on your device too.