Maskey is a codename-first, zero-knowledge, offline-ready password vault. Only codenames appear on screen; real values are revealed on demand. No account required, and your data stays on your devices.
系列：Maskey 1 / 3
- 1 Maskey — Your Passwords Belong to You 当前
- 2 Maskey — Support
- 3 Maskey — Privacy Policy
Codename-first · Zero-knowledge · Offline-ready password vault
Others “autofill” for you, yet you never really own your passwords. Maskey flips that. Command your passwords through codenames: only the codename shows on screen, real values appear on demand, and nothing leaks even when someone is watching.
Download on the App Store › · Support
Why Maskey
Only codenames, shoulder-surf proof Give every password and account a codename. Day to day you see only the codename; revealing the real value needs Face ID / Touch ID, and the clipboard auto-clears after 30 seconds.
Zero-knowledge, local-first AES-256-GCM encryption with Argon2id-derived keys, stored only on your devices. No account, fully offline. We can never see your data.
Link account + password Tie an account codename to a password codename in one place, organized by category for effortless sign-in.
Recoverable, never locked out A BIP39 passphrase recovery code works like a wallet recovery phrase. If you forget your master password, you can still unlock and reset it. Encrypted local and iCloud backups help keep data recoverable after device loss.
Proactive security checks Check weak passwords, reuse, and known breaches via HIBP k-anonymity. Passwords never leave the device. An optional Secret Key can act as a second key.
Handy tools Strong password and passphrase generator, TOTP one-time codes, custom icons and accent colors, and one-time migration from other managers.
Self-hostable · Exportable · No subscription Sync your encrypted vault to your own server, use an open format, and export anytime. Your data truly belongs to you.
How it differs from autofill-first managers
| Traditional manager | Maskey | |
|---|---|---|
| Core idea | Fills for you; you do not touch passwords | You command passwords via codenames |
| With others around | Plaintext may be visible | Only codenames are shown |
| Accounts | Usually needs a cloud account | No account, works offline |
| Forgot master password | Often unrecoverable or cloud-bound | Self-recovery via passphrase code |
| Data ownership | Vendor cloud first | Local-first, self-hostable |
Our security promises
- End-to-end encryption: data is encrypted before it leaves your device; we only ever handle ciphertext.
- No tracking: we do not collect your passwords or analyze your usage.
- Verifiable: built on industry-standard algorithms: AES-256-GCM, Argon2id, and BIP39.
Maskey — even in front of others, only codenames show.