VaultApprover
Secure Login Approver
Free · Designed for iPad. Not verified for macOS.
Now with Bitwarden cloud (bitwarden.com, bitwarden.eu), mTLS for self-hosted servers and a new PIN tab with offline tools. Approve sign-ins in one tap.
VaultApprover approves Bitwarden "Log in with device" requests on bitwarden.com, bitwarden.eu or your own self-hosted Vaultwarden/Bitwarden server.
It does one thing: shows who is signing in, so you can approve or deny it in one tap.
KEY FEATURES:
• Cloud or self-hosted — bitwarden.com (US), bitwarden.eu (EU) or any server URL
• Client certificates (mTLS) — import a .p12/.pfx for a server that requires one
• Biometric unlock — Face ID / Touch ID or fingerprint on every launch
• Real-time requests — WebSocket updates with a polling fallback
• Fingerprint phrase — the same 5-word phrase the official Bitwarden apps show
• 5-minute countdown — an expired request can no longer be approved
• Request history — every approval and denial with device, IP and response time
• Two-step login — authenticator app, email code, YubiKey OTP or recovery code
• PIN tab — offline tools for your own PINs: PIN Shift with named, encrypted vectors, PIN 24 (compatible with Ledger Passwords) and YubiKey PIN/PUK
• Optional settings sync — sign in with Apple or Google to keep theme, language and timers the same on all your devices; delete the sync account anytime in Settings
• English, Russian, Arabic and Simplified Chinese; light and dark themes
HOW IT WORKS:
1. Pick bitwarden.com or bitwarden.eu, or enter your server URL
2. Sign in with your email and master password (used once, never stored)
3. Turn on biometric unlock
4. When you choose "Log in with device" on another device, the request shows up in the app
5. Check the fingerprint phrase and tap Approve — done
SECURITY:
• Your master password is never stored on the device
• End-to-end encryption: RSA-2048-OAEP key exchange
• Your user key is kept in the device's secure storage behind biometric lock
• All cryptography runs on the device — the server never sees your keys
• Argon2id and PBKDF2 key derivation
• Privacy screen hides the app in the app switcher
VaultApprover never shows your vault items.
By default it doesn't read them either: only the experimental PIN Shift option (off by default) reads items that have a "PIN Shift" field, and only on the device.
Works with accounts that unlock with a master password. SSO, trusted-device and Key Connector accounts are not supported.
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
• PIN Shift keeps several named vectors (Ledger 1, Ledger 2…) and switches between them with one tap; the result shows which vector made it.
• Saved vectors are encrypted with your Bitwarden account key and never shown again; edit or delete them any time, or generate a new random one.
• Experimental, off by default: read vectors from Bitwarden vault items that have a “PIN Shift” field.
The developer, Ilya Arestov, indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- Ilya Arestov
- Size
- 62.8 MB
- Category
- Utilities
- Compatibility
Requires iOS 15.0 or later.
- iPhone
Requires iOS 15.0 or later. - iPad
Requires iPadOS 15.0 or later. - iPod touch
Requires iOS 15.0 or later. - Mac
Requires macOS 12.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 1.0 or later.
- iPhone
- Languages
- English
- Age Rating
4+
- 4+
- Copyright
- © 2026 Ilia Arestov