KeyLockr

E2E Encrypted Password Manager - Your passwords, your control

Free E2E Encrypted Cross-Platform Zero Knowledge

Download

iOS

macOS v4.2.0

macOS: Build 260805.0448 · 9.0 MB · Requires macOS 13.0+

APK v4.0.1

Play Store

Android: Build 260805.0530 · 28.6 MB · Requires Android 7.0+

Chrome Extension v4.1.2

Chrome: v4.1.2 · Install via Chrome Web Store

Need Windows or Linux? Let us know

Why KeyLockr?

Security without compromise, simplicity without complexity

End-to-End Encryption

Your data is encrypted on your device before it ever leaves. Only you can decrypt it.

Zero Knowledge

We cannot see your passwords. Even if our servers are breached, your data remains secure.

Phone-Centric

Your phone is the master key. Approve access requests from any device with a single tap.

2FA Built-in

Store and generate TOTP codes alongside your passwords. One app for everything.

SSO Integration

Secure Sync

Seamlessly sync across all your devices. Your encrypted vault, everywhere you go.

How It Works

Simple, secure, and seamless

Setup on Phone

Install KeyLockr on your phone and start using immediately

Connect Devices Optional

Scan QR code to connect your Mac, PC, or browser extension

Approve Access Optional

When other devices need a password, approve the request on your phone

One picture: what is inside the line, and what is outside

Secret keys are created locally by the devices that use them, and content is sealed before it ever leaves a device. Hover or tap any card or arrow for the full story, algorithm names included.

Zero knowledge Two-layer encryption A fresh nonce on every write Approved on your phone

Trust boundary map Your authorized devices can read content; vault fields remain encrypted on the server. A third-party app receives only results or data addressed to it within the scope you approved.

This diagram needs JavaScript to be interactive. The conclusion: secret keys are generated locally by the devices that use them, and content is sealed before it is sent. We store encrypted fields, envelopes, public keys, and operational metadata, but no key that opens the vault. Third-party apps receive only named powers you approved, and revocation stops future access.

See the full diagrams → Signing in to other apps

Security Architecture

Vault content and sensitive metadata remain encrypted on the server; only authorized devices holding the corresponding keys can read them.

Two-Layer Encryption

Light Encryption: For titles, website URLs, and 2FA labels. Encrypted with your Account Key so our servers can't read them. Desktop and browser devices securely receive this key after phone authorization, enabling quick browsing without per-item approval.
Strong Encryption: For actual passwords and sensitive note content. Each file has its own independent filekey. Requires phone approval for each access (or set device to auto-approve mode).

Zero Knowledge

Secret keys are generated locally and remain in plaintext only on the devices that hold them. The server stores encrypted vault fields, sealed envelopes, public keys, and operational metadata, but no key that decrypts vault content. Key transfers between devices are encrypted for the named recipient.

Data Storage

Data is stored both locally on your phone and in the cloud. Works offline anytime. Cloud sync ensures you can restore data whenever needed.

Auto Backup

Phone supports automatic backup with 7-day retention. All backup data is encrypted with your account key. Backup files can be downloaded and imported to other accounts (with correct key).