End-to-end encryption

Only you can read your vault. Not even we can.

ZZPass locks every password, note and file on your iPhone, iPad or Mac before it syncs. The key comes from your primary password, and that password never leaves your device.

Who can see whatZZPass, Apple, and anyone in between If you forget your passwordThe two ways back in Keep it that wayFour habits that matter

Who can see what.

Your vault syncs through your own iCloud. It never touches a ZZPass server, and what Apple stores is already locked.

You

Everything

Once you unlock ZZPass with your primary password, Face ID or Touch ID, your passwords, notes, files and 2FA codes are readable on your own devices.

Apple (iCloud)

Locked data only

Apple carries your vault between devices and sees encrypted records, how many there are and when they sync. Not the passwords, notes, titles or websites inside.

ZZPass

Nothing in your vault

We run no account server and never receive your vault. If you use Emergency Access or TimeCapsules, our server holds keys that are already locked to the people you chose, the time they open, and, if you ask for warnings, your email address.

What that means in practice: a breach at ZZPass, a court order to us, or someone getting into iCloud would all find nothing they can read. It also means nobody can reset your primary password for you, so keep your Emergency Kit somewhere safe.

What happens when you save a password.

All of it happens on your device, in about the time it takes to tap Save.

Locked on your device
The item is encrypted with AES‑256 under a key made from your primary password. Your password itself is never stored or sent.
Synced through your iCloud
The locked item goes to your own iCloud and on to your other devices. Apple's iCloud protection sits on top.
Opened only where you unlock
Your iPhone, iPad or Mac unlocks it when you do. The key stays in that device's Keychain and is never synced.

Sharing works the same way. Each shared group has its own key, and each member gets a copy locked to their own account key, so only the people in the group can read what's in it. How sharing works

A new device needs two things.

Your primary password, and the Secret Key printed on your Emergency Kit. Someone who guesses or steals your password still can't open your vault on their own phone without that key.

Type the Secret Key, or scan the QR code on your Emergency Kit.
Lost the paper? ZZPass shows it under Devices on any device you're already signed in to.
Your primary password needs at least 12 characters, and ZZPass refuses weak ones.

Signing in on a new device: email address, Secret Key and primary password, or Scan QR Code

If you forget your primary password.

We can't send you a reset link, because we never had your key. There are two ways back in.

On a device that's already set up, type a password on the lock screen. After one wrong try, tap Recover Account? and confirm with Face ID or Touch ID. Then choose a new primary password.
Anywhere else, use your printed Emergency Kit. Your primary password is printed on it, so that's all you need.

With neither, the vault can't be opened by anyone. That's the price of nobody else being able to open it either. More about recovery

The ZZPass Emergency Kit with email address, Secret Key, primary password and QR code

Four habits that keep it private.

A long primary password

It's the one password you remember. A few unrelated words beat a short jumble.

Print your Emergency Kit

Keep it with your passport, not in your email or a photo on your phone.

Set Auto-Lock

ZZPass locks itself after the time you choose in its Security settings.

Keep your devices updated

Encryption can't protect a phone that's unlocked in someone else's hands.

For the technically curious.

Standard, well-reviewed building blocks from Apple's CryptoKit. Nothing home-made. The full design is in the security whitepaper.

Part	What ZZPass uses
Vault encryption	AES‑256‑GCM, which also detects tampering
Key from your password	PBKDF2‑SHA256 with 650,000 rounds, plus your Secret Key
Sharing and Emergency Access	P‑256 key agreement, with owner-signed group membership
Keys on your device	Vault keys stay in this device's Keychain and never sync. A few Emergency Access keys travel in your iCloud Keychain, which Apple end‑to‑end encrypts.
Our servers	Open source: the escrow server behind Emergency Access and TimeCapsules, and anonymous, opt-out usage counts

Quick answers.

Can ZZPass reset my primary password?

No. We never have your key, so we can't reset or recover your password. Use Recover Account on a device that's already set up, or your printed Emergency Kit.

Does my vault go to ZZPass servers?

No. It syncs through your own iCloud, already encrypted. Our server is only involved if you use Emergency Access or TimeCapsules, and it holds keys that are locked to the people you chose.

What can Apple see?

Encrypted records, how many there are and when they sync, plus your Apple Account for iCloud itself. Not the passwords, notes, titles or websites in your vault.

What if someone steals my iPhone?

They need your device passcode, then your primary password or your face or fingerprint to open ZZPass. The keys never leave the device in a readable form.

What if a court asks ZZPass for my passwords?

We have nothing readable to hand over. Your vault isn't on our servers, and we don't have your key.

Can I turn encryption off?

No. Everything in ZZPass is encrypted, always. There's nothing to set up.

Private by design. Free to start.

Your vault, locked on your devices and synced through your own iCloud.

How ZZPass keeps you safe →