A password manager for iPhone
Skelett keeps every password, passkey and 2FA code in an encrypted vault on your device. No account to create. No company cloud to trust. One master password — and it's yours, not ours.
Free · Pro optional
iPhone & iPad, iOS 17+
01 — The promise
Most password managers ask you to trust their cloud. Skelett is built so there is nothing to trust — this table is the whole business model.
02 — The mechanics
No signup flow, no sync service subscription, no "trust us." Here is the entire architecture:
It's stretched through PBKDF2 × 310,000 into an encryption key. The password itself is never stored and never transmitted — only you know it.
Passwords, 2FA secrets, cards, identities, notes, attachments and passkey keys are encrypted with AES-256-GCM before they ever touch disk.
Encrypted records ride your private iCloud between your devices. New iPhone? Sign into iCloud, enter your master password, done.
03 — The tools
Skelett isn't a demo of a security model — it's a daily driver.
Passwords and passkeys appear right on the keyboard in Safari and apps, matched to the correct site.
Scan a QR and get rotating codes next to the password they belong to — including SHA-256/512, 8-digit and custom-interval codes.
Create and sign in with passkeys, stored encrypted like everything else.
Credit cards, personal details and secure notes — encrypted, organized, one tap to copy.
Keep recovery codes, document scans and small files inside the vault, sealed with the same key.
A real strength score computed on-device, with a home-screen widget to keep you honest.
Cryptographically uniform passwords with guaranteed character variety. No modulo bias — we checked.
Bring your vault from 1Password, Bitwarden, LastPass, Chrome or Safari with a CSV/1PUX file.
Unlock with your face, relock on a timer you choose, and a privacy shield hides your vault in the app switcher.
Separate work from personal, or share-of-mind from archive. Move items between vaults freely.
04 — The price
The security model is never the paid part. Pro adds organization and power features.
Full encryption. No time limits, no nags.
Monthly or yearly — current pricing shown in the App Store.
05 — Straight answers
Honestly: your vault is gone. There is no reset email because we never have your password or your data — that's the point of the design. Skelett will offer to erase everything so you can start fresh. Pick a master password you'll remember, and treat it accordingly.
Apple's app is good — and if it covers you, use it. Skelett adds a dedicated vault with multiple vaults, richer 2FA (SHA-256/512, 8-digit, custom intervals), cards, identities, notes and file attachments, password health scoring, and imports from other managers. Same local-first spirit, more room.
What lands in iCloud is ciphertext sealed with your vault key, which is derived from your master password on your device. Without that password the records are noise. Enable Advanced Data Protection on your Apple account and even Apple's own infrastructure keys are out of the loop.
The app keeps working. There is no server dependency — nothing expires, nothing stops syncing through your iCloud, and your data stays decryptable on your device. That's a resilience most cloud password managers can't offer.
Optionally, anonymous usage counts — app launches, feature taps — through a privacy-first service, never linked to you and never including vault contents. It ships on so we can tell if features matter, and Settings has a single switch to turn it off. The App Store privacy label reflects exactly this.
Not today. Skelett is built natively for iPhone and iPad, and doing one platform properly comes first.
Free on the App Store · Set up in under a minute