Passage

age-encrypted password management for iOS

A security-focused iOS password manager using age encryption, compatible with FiloSottile's passage command-line tool.

No cloud accounts. No subscriptions. You own your keys and data. Open source under the MIT license.

Features

Age encryption – X25519 key agreement + ChaCha20-Poly1305 AEAD
Full compatibility with the passage CLI and age file format
Multiple key types – native age keys, SSH Ed25519, SSH RSA, GitHub keys
Git sync – native libgit2 push/pull over HTTPS or SSH
AutoFill extension for Safari and apps
TOTP/HOTP one-time password generation
Home screen and lock screen widgets
Password generator – random or XKCD-style passphrases
Face ID, Touch ID, and Optic ID authentication
CSV import from Bitwarden, LastPass, 1Password, Chrome, Firefox, KeePass
Key rotation – re-encrypt all passwords in one operation
Hierarchical store with per-directory recipients
Password expiry tracking with notifications
QR code key export and import
Companion CLI written in Go

Privacy

Passage is built with privacy as a non-negotiable constraint.

No cloud account required – data stays on your device
No analytics, telemetry, or tracking of any kind
No network calls except user-initiated git sync
Keys stored in the Secure Enclave, excluded from iCloud Keychain and backups
Secure clipboard – local only, auto-expires in thirty seconds
Decrypted content zeroed from memory on dismissal
Open source and auditable

Documentation

Contact