CypherKeep

Mac users who need to store API keys, crypto seed phrases, and sensitive notes today rely on cloud-based tools like 1Password or iCloud Keychain, which require accounts, subscriptions, and store data on third-party servers (AWS or Apple's cloud). These tools treat API keys and seed phrases as free-form text without validation, and 1Password costs $36/year on an Electron-based app. Users who want their master password and secrets to never leave their device, and who want a one-time purchase instead of a subscription, have limited native options.

CypherKeep is a native macOS vault built in Swift with Apple's CryptoKit, storing API keys, seed phrases, and secure notes in a single sandboxed SQLite file with zero network calls. It auto-detects vendor API keys (OpenAI, Anthropic, GitHub, Stripe, Gemini, HuggingFace, ElevenLabs) by prefix and runs live HTTP validity tests, validates seed phrases against BIP-39, and encrypts everything with AES-256-GCM using per-record nonces and auth tags. Other features include FTS5 full-text search, configurable clipboard auto-clear, configurable auto-lock with Touch ID/Face ID re-unlock, and manual export of an encrypted .cypherkeep backup file for moving between Macs. There is no account, no server, and no automatic sync; the master password lives only in the macOS Keychain and is never transmitted.