Titanium Passkey

Offline FIDO2 passkey vault

$9.99

Passkeys bound to your device — not replicated to a cloud. Private keys live in the Secure Enclave, gated by Face ID or Touch ID. No account, no sync, no tracking. Titanium Passkey is an offline FIDO2 / WebAuthn credential provider for iPhone, iPad, and Mac. Every private key lives inside the Secure Enclave and never leaves it. Every sign-in is gated by Face ID or Touch ID, enforced in hardware. WHY TITANIUM PASSKEY? • Passkeys bound to silicon — never replicated to a vendor cloud you don't control • No account, no sign-up, no subscription — install and use • Works with every passkey-capable site: GitHub, Google, your bank, self-hosted apps • A stolen phone signs nothing — biometric enrollment gates the private key at the hardware level • Zero telemetry, zero analytics, zero tracking SDKs in the binary • Sign in on any desktop — Windows, Mac, Linux, Chromebook. On the browser's passkey prompt, choose "Use a Device Nearby" / "Other Options" and scan the QR code with your iPhone. Your phone stays the authenticator; the desktop never sees your key. HOW IT WORKS Enable Titanium Passkey under Settings → Passwords → Use Passwords and Passkeys from. When a site requests a passkey, iOS routes the challenge to the extension. The extension wakes, Face ID or Touch ID unlocks the key inside the Secure Enclave, the assertion is signed on-chip, and handed back. You're signed in. WEBAUTHN SUPPORT • ES256 (COSE -7) over WebAuthn — the baseline every passkey-capable site supports • PRF extension (hmac-secret) for encrypted data binding • Conditional mediation — silently offer passkey sign-in without interrupting the user • Fast authentication — skip the picker when only one passkey matches STORAGE & KEYS • EC P-256 keys created with kSecAttrTokenIDSecureEnclave — not extractable by the app, iOS, or Apple • Gated by biometryCurrentSet + privateKeyUsage — re-enrolling Face ID invalidates keys • Keychain marked AfterFirstUnlockThisDeviceOnly — excluded from iCloud, iTunes, and Finder backups • Optional multi-device tier for iCloud Keychain sync, off by default, trade-offs explained in-app PRIVACY • The Credential Provider extension has no network entitlement — it cannot reach the internet • No account, no email, no cloud • No telemetry, no analytics, no ad identifiers • Attestation uses the 'none' format — we don't uniquely identify your device to relying parties • Anonymous crash reports only if you've opted in via iOS Settings No subscriptions. No in-app purchases. Just passkeys, bound to silicon.

Ratings & Reviews

  • This app hasn’t received enough ratings or reviews to display an overview.

The developer, Pavel Kanzelsberger, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .

  • Data Not Collected

    The developer does not collect any data from this app.

    Privacy practices may vary, for example, based on the features you use or your age. Learn More

    Accessibility

    The developer has not yet indicated which accessibility features this app supports. Learn More

    Information

    Seller
    • Pavel Kanzelsberger
    Size
    • 13.5 MB
    Category
    • Utilities
    Compatibility
    Requires iOS 17.0 or later.
    • iPhone
      Requires iOS 17.0 or later.
    • iPad
      Requires iPadOS 17.0 or later.
    • Mac
      Requires macOS 14.0 or later.
    • Apple Vision
      Requires visionOS 1.0 or later.
    Languages
    Arabic and 17 more
    • Arabic, Czech, Danish, Dutch, Finnish, French, German, Italian, Japanese, Korean, Polish, Portuguese, Simplified Chinese, Slovak, Spanish, Swedish, Traditional Chinese, Ukrainian
    Age Rating
    4+
    Copyright
    • © 2026 Mediaware, s.r.o.
  • Developer Website
  • Privacy Policy

    • Supports

    • Family Sharing

      Up to six family members can use this app with Family Sharing enabled.

    More by Pavel Kanzelsberger