ByteGuard

ByteGuard is a privacy-first password manager and authenticator for iPhone, iPad, and Mac, built by an indie developer.

All vault data — passwords, passkeys, 2FA codes, cards, identities, and notes — is encrypted locally with a five-tier key hierarchy and per-entry key isolation.

Key derivation combines two secret factors: ? a master password (kept in your head, never leaves the device) + ? a 128-bit Secret Key (BIP39 12-word mnemonic, generated locally at vault creation) + a 32-byte per-vault salt ? Argon2id (64MB, 3 iterations) ? Master Key. HKDF-SHA256 then derives a per-vault data key, and AES-256-GCM encrypts sensitive fields with a fresh IV per write. Neither factor alone can unlock the vault — even if iCloud Keychain leaks, your data stays sealed without the master password.

This two-factor design keeps the vault end-to-end encrypted, including optional iCloud sync. There is no ByteGuard account and no ByteGuard server; the app works fully offline.

SECURITY

• Master Password + 128-bit Secret Key dual protection
• Biometric unlock (Face ID / Touch ID / Optic ID), auto-lock, app-switcher privacy screen
• Compatible with Apple Lockdown Mode

PASSWORD MANAGEMENT

• Unlimited passwords, cards, notes, and identities — free
• One-tap AutoFill in Safari and apps, with smart domain matching
• Password generator (random characters or memorable passphrases) with history

AUTHENTICATOR

• Built-in TOTP / HOTP 2FA generator (SHA-1 / SHA-256 / SHA-512)
• System-level one-tap AutoFill for codes

PASSKEYS

• Create, store, and use passkeys for passwordless sign-in across apps and browsers

MORE THAN PASSWORDS

• Bank cards, identity documents, secure notes, API keys, licenses, OAuth tokens
• Custom tags; 30-day recovery for deleted items
• Multiple vaults, each with independent encryption and Secret Key

SECURITY REPORT

• Password strength, duplicate, and expiration analysis
• HTTP-only site detection
• Breach monitoring via Have I Been Pwned (k-anonymity, no password ever sent)
• 2FA coverage check and an overall security score (0-100)

SYNC & PORTABILITY

• Optional end-to-end encrypted iCloud sync across Apple devices
• Import from 1Password, Bitwarden, LastPass, Dashlane, KeePass, and Apple Keychain
• Export to CSV, JSON, or encrypted .bytegx

PRIVACY

• No account required, no tracking, no analytics, no ads
• Available in 35 languages

ByteGuard has a free tier with full local password management. A paid Premium plan (monthly, yearly, or one-time lifetime) adds end-to-end encrypted iCloud sync, multi-vault expansion, breach detection, the full security report, and custom themes. Billing is handled by Apple.