Cipher7 是一款代号优先、零知识、离线可用的密码保险箱。屏幕上只露代号，真实内容按需查看，旁人看着也不泄露。无需账号，数据只存你的设备。
系列：Cipher7 1 / 2
- 1 Cipher7 — 你的密码，只属于你自己 当前
- 2 Cipher7 — 技术支持 / Support
- 中文
- English
代号优先 · 零知识 · 离线可用的密码保险箱
别人替你「自动填充」，你却从不真正掌控自己的密码。 Cipher7 反其道而行：让你用「代号」安全地驾驭密码——屏幕上只露代号，真实内容按需查看，旁人看着也不泄露。
为什么选择 Cipher7
🔒 只露代号，防肩窥 为每个密码、账号起一个代号。日常只看代号，查看真实内容需 Face ID / Touch ID 确认，剪贴板 30 秒后自动清空。
🛡️ 零知识，本地优先 AES-256-GCM 加密 + Argon2id 派生密钥，数据只存你的设备。无需注册账号、完全离线可用，我们看不到你的任何内容。
🔗 账号 + 密码，一键关联 把账号代号与密码代号关联到一处（GitHub、网银……），按分类整理，登录一目了然。
🔑 忘了也能找回，永不锁死 BIP39 助记词恢复码（像管理钱包一样）。忘记主密码也能凭它解锁重设；自动本地 + iCloud 加密备份，设备丢了也不丢数据。
🔍 主动安全检查 弱密码、重复使用、是否出现在已知数据泄露（HIBP k-匿名查询，密码不出设备）——一眼看清。可选 Secret Key 作为第二把钥匙。
🧰 顺手的工具 强密码 / 助记词式口令生成器、TOTP 动态验证码、自定义图标与强调色、从其他密码管理器一次性迁移。
🌐 可自托管 · 可导出 · 无订阅 把加密保险箱同步到你自己的服务器；格式开放、随时导出。你的数据，真正属于你。
和「自动填充优先」的密码管理器有何不同？
| 传统密码管理器 | Cipher7 | |
|---|---|---|
| 核心思路 | 替你填充，你不接触密码 | 你用代号主动驾驭密码 |
| 旁人在场 | 可能瞥见明文 | 只露代号，防肩窥 |
| 账号体系 | 多需注册云账号 | 无需账号，离线可用 |
| 忘记主密码 | 多数无解 / 依赖云 | 助记词恢复码自助找回 |
| 数据归属 | 厂商云为主 | 本地优先，可自托管 |
安全承诺
- 端到端加密：数据离开设备前已加密，我们只经手密文。
- 无追踪：不收集你的密码、不分析你的使用内容。
- 可验证：加密采用业界标准算法（AES-256-GCM、Argon2id、BIP39）。
Cipher7 —— 在别人面前，也只露代号。
Codename-first · Zero-knowledge · Offline-ready password vault
Others “autofill” for you — yet you never really own your passwords. Cipher7 flips that. Command your passwords through codenames: only the codename shows on screen, real values appear on demand, and nothing leaks even when someone’s watching.
Download on the App Store › · Support
Why Cipher7
🔒 Only codenames, shoulder-surf proof Give every password and account a codename. Day to day you see only the codename; revealing the real value needs Face ID / Touch ID, and the clipboard auto-clears after 30 seconds.
🛡️ Zero-knowledge, local-first AES-256-GCM encryption with Argon2id-derived keys, stored only on your devices. No account, fully offline — we can never see your data.
🔗 Link account + password Tie an account codename to a password codename in one place (GitHub, online banking…), organized by category for effortless sign-in.
🔑 Recoverable, never locked out A BIP39 passphrase recovery code (just like a crypto wallet). Forget your master password and still unlock & reset. Automatic encrypted local + iCloud backups mean a lost device never means lost data.
🔍 Proactive security checks Weak passwords, reuse, and known breaches via HIBP k-anonymity (passwords never leave the device) — all at a glance. Optional Secret Key as a second factor.
🧰 Handy tools Strong password & passphrase generator, TOTP one-time codes, custom icons and accent colors, one-time migration from other managers.
🌐 Self-hostable · Exportable · No subscription Sync your encrypted vault to your own server; open format, export anytime. Your data truly belongs to you.
How it differs from “autofill-first” managers
| Traditional manager | Cipher7 | |
|---|---|---|
| Core idea | Fills for you; you don’t touch passwords | You command passwords via codenames |
| With others around | May glimpse plaintext | Only codenames — shoulder-surf proof |
| Accounts | Usually need a cloud account | No account, works offline |
| Forgot master password | Often unrecoverable / cloud-bound | Self-recovery via passphrase code |
| Data ownership | Vendor cloud | Local-first, self-hostable |
Our security promises
- End-to-end encryption — data is encrypted before it leaves your device; we only ever handle ciphertext.
- No tracking — we don’t collect your passwords or analyze your usage.
- Verifiable — built on industry-standard algorithms (AES-256-GCM, Argon2id, BIP39).
Cipher7 — even in front of others, only codenames show.