How can we help?

Yes, on iPhone, iPad, and Mac. Store logins, passkeys, and one-time 2FA codes, all end-to-end encrypted with the same key that seals your documents and synced across your devices. There is no separate account and no master password to reset. All of it is free and unlimited, on every plan and on none. It is on the way to Android; everything else in the app is already there.

Turn Kinship Vault on as an AutoFill provider in your device settings, then it fills logins and passkeys system-wide, in your browser and inside apps.

On iPhone or iPad: open the Settings app, find the AutoFill & Passwords settings, and enable Kinship Vault as a provider.

On a Mac: open System Settings, go to the passwords AutoFill options, and enable Kinship Vault there.

Every fill is unlocked with Face ID or Touch ID, so nothing is filled without you. Passkeys sign you in the same way, with no password to type.

A private, on-device review of your logins. It scores them out of 100 and groups what to fix first: weak, reused, old, and, if you allow an online check, breached passwords, each with a clear next step.

The breach check uses k-anonymity, so a full password is never sent anywhere; only a short, partial hash prefix is used to look up matches. In Strict Offline mode the breach check is off entirely, and the weak, reused, and old checks still run on device.

Entirely on your device, encrypted with that device's secure hardware. That's true on iPhone, iPad, Mac, and Android alike (on Android, the key is wrapped by the Android Keystore). We never receive your documents or your decryption key. There is no Kinship Vault server that holds your vault. If you turn on backup, it is encrypted with your key before it leaves the device, and stored in your own iCloud or, on Android, your own Google Drive.

You can recover your vault three ways: with the recovery passphrase you wrote down at setup, by collecting recovery shards from the trusted contacts you nominated (any 3 of 5 reconstruct the vault), or, if you enabled it, via the time-locked Dead Man's Switch.

No. There's no password to reset on our side, because we never had your key. If you've lost your passphrase and your trusted-contact shards aren't reachable, your vault stays sealed forever. That's the cost of "we can't see your data" being literally true.

iCloud backup is optional. When enabled, your backup file is fully encrypted on your device before it leaves. Apple sees only encrypted bytes. Your decryption key stays on your device and is never uploaded to iCloud.

On iPhone and iPad: the camera (to scan documents) and Face ID or Touch ID (to unlock the vault).

On Android: the camera (to scan documents) and your fingerprint or face (to unlock the vault). A PIN works as the fallback.

On Mac: the camera is used for one thing only, reading the pairing QR from your other device, because the Mac has no document-scanning flow. Unlocking uses Touch ID, your Mac login password, or your PIN.

Everything is processed entirely on your device. We do not collect analytics, telemetry, or usage data.

You split your recovery key into 5 pieces and share them with people you trust. Each shard is shown as a QR code, exported as a small file, or printed as a PDF "shard card." Any 3 of 5 reconstruct your vault. No single person can unlock it alone, including you.

Yes. On the device that already has your vault, open Settings → Link a New Device and scan the QR with the other device. The same vault is live on both. Setup takes under a minute, and the steps are the same whether the second device is an iPad or a Mac.

1. On the device that already holds your vault, open Settings, then Unlock PIN & Recovery, then choose Link a New Device.
2. Authenticate with Face ID or Touch ID. A QR appears with a 60-second countdown. On an iPhone or iPad, iOS blocks that QR from screenshots and screen recording, so it cannot leak through the system. On a Mac it cannot: macOS gives apps no way to block screen capture, so if the Mac is the device showing the code, the app warns you on screen and you should not capture it.
3. On the new device, open Kinship Vault and choose Bring My Vault. It appears on the welcome screen on a fresh install, or in the Recovery row of the unlock screen if you already have something set up.
4. Point the new device's camera at the QR. An iPad uses its camera; a Mac uses its built-in camera, so just hold the first device up to the screen. The vault key transfers directly between the two devices through that on-screen code. Nothing routes through our servers.
5. The new device wraps the key in its own secure hardware and unlocks the same vault.

Going forward, push a backup to iCloud whenever you add or edit documents. Backups are encrypted with your key before they leave the device, so neither we nor Apple can read them; iCloud only stores the encrypted bytes.

An optional inactivity-triggered handoff. You choose what goes into a separate Recovery Vault, name one trustee, and set a check-in window of 30, 60 or 90 days plus a grace period of 7, 14 or 30 days. If both pass without you checking in, your trustee can release that Recovery Vault on their own device as a separate, read-only vault. Until then they have no access to any of it. Opening the app resets the clock, and you can change or turn it off at any time from Settings.

No server of ours is involved: your iCloud account carries the encrypted copy and your signed check-ins, and your trustee's device does the evaluating and the decrypting. Full reference in the documentation.

Arming it is iPhone and iPad only. The feature depends on check-in reminders arriving reliably over months, which a desktop app that may sit closed for weeks cannot promise. A trustee using a Mac does see their status there, but the release itself is done on their iPhone.

Drag a PDF or an image onto the window, or pull one in from Photos or Files. There is no camera-scanning flow on the Mac, so importing is how documents get in.

Everything else is the same: the same on-device recognition reads the fields across the same 100+ document types, and the file is encrypted before it touches storage. Nothing is uploaded for processing.

No. It's a single universal purchase. Whatever you own, a subscription or Lifetime Premium, carries across iPhone, iPad, and Mac on the same Apple Account. Download it on the Mac and it's already unlocked.

If your Mac doesn't recognize the purchase, open the App Store app, choose Store → Reload Page, and make sure you're signed in with the same Apple Account you bought it on.

Yes. There's a native Android app on Google Play, with the same on-device encryption, camera scanning, Recovery Network, Emergency Mode, and encrypted photo vault. See the Android app.

Yes. The Android app is a separate purchase through Google Play. Apple and Google each keep purchases inside their own store, so an App Store subscription or Lifetime doesn't carry over to Android, and vice versa. The two stores are priced separately: on Google Play it is $1.99/month, $14.99/year, or $39.99 Lifetime, while the App Store has the Solo and Shared plans listed on our pricing page.

There's no live sync or pairing between Android and Apple devices today. Each is its own self-contained vault. To move documents across, use an encrypted export, or set up a Recovery Network / recovery passphrase and restore on the other device. On Android, backups go to your own Google Drive rather than iCloud.

Open Manage Vaults, create a shared vault, then invite people one at a time by name: pick a contact or type their Apple ID, and confirm with Face ID or Touch ID. Kinship prepares that person's private invite link.

Hand it over however suits the moment: Send opens the normal share sheet (Messages, WhatsApp, email), or Show as QR lets them scan it if they're with you. When they open it and you grant access, the vault's key is wrapped to their identity, and only they can open the vault, with their own biometrics. See Introducing shared vaults.

Yes. The link is tied to the specific Apple ID you invited, so it only ever opens the vault for that person, no one else who sees the link can join. That's the whole point of inviting by name first: the delivery channel doesn't have to be secret. And the vault contents stay end-to-end encrypted the entire time.

Yes. After you invite them by name and confirm with Face ID, choose Show as QR. They point their Camera at the code and it opens the invite, no typing, no link sent anywhere. The QR is just that same private link drawn as a code, so it still only works for the Apple ID you invited.