Tripass

Password manager for iPhone

Your passwords, sealed on your iPhone before they go anywhere.

Tripass keeps your logins, two-factor codes and cards in one vault. Everything is encrypted on your device with AES-256-GCM, so our servers only ever hold data they cannot read.

Coming soon to the App Store

For iPhone. Unlocks with Face ID.

Codes30s
GitHub
you@example.com
482 913
Microsoftwork account
207 554
Binanceexchange
639 180

Example codes for illustration.

What's inside

Four tabs. Everything you sign in with.

Tripass is built around how you actually use passwords: find one, fill it, check it's still safe.

Vault

Logins, notes and cards

Store passwords, secure notes and payment or transit cards. A strong password generator sits right inside every new entry.

Codes

Two-factor codes built in

Scan a QR code to add an authenticator. Supports SHA-1, SHA-256 and SHA-512 codes, with a countdown ring so you never type a stale one.

Health

Know when a password is exposed

Tripass checks your passwords against known data breaches and flags weak or reused ones, without revealing the passwords themselves.

AutoFill

Fill in Safari and apps

Use Tripass from the iOS keyboard's password suggestions to sign in to websites and apps in one tap.

Clipboard

Copies that clean up after you

When you copy a password or code, Tripass clears it from the clipboard automatically after a short delay.

Settings

Encrypted cloud backup

Turn on backup to restore your vault on a new iPhone. Your vault is encrypted before upload, and only your master password can open it.

Zero-knowledge

What we see is what you see on the right.

Encryption happens on your iPhone. The backup we store is ciphertext, and we never receive your master password or the key it creates.

On your iPhone readable by you

Site
github.com
Username
you@example.com
Password
R7#vq-Lm2!pzX9
2FA secret
JBSWY3DPEHPK3PXP

On our servers AES-256-GCM

nonce 9f2c41e07ab35d16c8e9b0f4
Yk3Xq0vB+1r9fT2mLw8ZcH4n7sQe6JdUa5pRkOiV0yGb1hNf3CxTzP2qW9mE8uLs4AoDj7KvIt6S5Mz…
tag 3e71c0a9f4d28b65

Breach checks stay private

Tripass sends only the first 5 characters of a password's SHA-1 hash to Have I Been Pwned, then compares the results on your device.

Face ID unlocks locally

Biometric checks are handled by iOS. Tripass never sees or stores your face or fingerprint data.

Data held in Australia

Encrypted backups are stored in Google Cloud's Sydney region (australia-southeast1).

Questions

Before you download

What happens if I forget my master password?

Because of zero-knowledge encryption, we cannot reset it or recover your vault for you. Keep your master password somewhere safe offline.

Do I need an account?

An account is only needed for encrypted cloud backup and sync. You sign in with your email address.

Can I move my two-factor codes out of Tripass?

Yes. You can export your codes as an encrypted file or as QR codes to import into another authenticator.

How do I delete my account?

You can delete your account from Settings in the app. Your encrypted backup is then removed from our servers. See Support for details.