Kakuremi - KeePass Manager
KeePass vault · free YubiKey
Free · In‑App Purchases · Designed for iPad. Not verified for macOS.
Free local-first KeePass (KDBX) vault for iPhone — offline, AutoFill & Face ID, no YubiKey needed. Got a YubiKey 5? Free NFC unlock (HMAC-SHA1). No cloud, no tracking.
A local-first KeePass (KDBX) password manager for iPhone -- works offline, with AutoFill and Face ID, compatible with KeePassXC and KeePass2. Opening your first database and editing your vault are free. YubiKey NFC unlock is included free -- no subscription.
Kakuremi was built for one thing: a KeePass vault that stays yours.
**YubiKey Challenge-Response -- Free, No Subscription**
Enter your master password, then hold your YubiKey to the top of your iPhone over NFC -- the key is a second factor, not a replacement for your password. The hardware-key unlock is not time-limited, not gated, and not billed separately.
Kakuremi uses HMAC-SHA1 Challenge-Response, the same scheme as the KeePass desktop apps. It works with NFC-capable YubiKey 5 Series models and the YubiKey NEO once an HMAC-SHA1 slot is configured (via the YubiKey Manager / Authenticator app). FIDO2/passkey-only keys -- such as the Security Key Series -- cannot unlock a database, because they do not implement HMAC-SHA1 Challenge-Response.
**A KDBX Engine Written in Rust**
Kakuremi's KDBX parsing and serialization are written in Rust, a memory-safe language chosen to reduce the risk of buffer-overflow and use-after-free bugs.
Open KDBX 3.x (read-only) and KDBX 4.x; create, edit, and save in KDBX 4. Compatible with KeePassXC, KeePass2, and other standard-compliant KeePass clients.
**AutoFill in Safari and in Apps**
Kakuremi ships a native Credential Provider extension that works with AutoFill on current and older versions of iOS. Tap the key icon, choose Kakuremi, and pick the login you need.
**Local-First -- No Accounts, No Cloud Sync**
Kakuremi has no accounts, no sync service of its own, no telemetry, and no analytics. Your database is decrypted in memory and released when the app locks. An encrypted copy of your logins (used by AutoFill) and recent copies of your vault file stay in the app's own storage -- you can clear both in Settings. Apart from Apple's own App Store purchase checks, the only network features are optional and off by default: website icons (only a site's domain is sent to Google's favicon service) and password breach-check (a partial, anonymized hash sent to Have I Been Pwned). Neither lookup sends your master password or an entry's password, username, or notes.
**What's Free**
- Create or open one KeePass database (KDBX 4; KDBX 3.x read-only)
- Create, edit, and organize entries, groups, and tags
- YubiKey NFC Challenge-Response unlock
- Face ID / Touch ID biometric unlock
- iOS AutoFill (Credential Provider)
- Store TOTP (2FA) secrets
- Password generator
- Search and Recycle Bin
- View attachments
- Password breach check (Have I Been Pwned)
- Themes (Light / Dark / Warm) and 6 accent colors
- Localized in 9 languages
**Kakuremi Pro**
For power users who want more:
- Use more than one database
- Add file attachments
- View and copy live TOTP codes
- Backup history & restore
Pricing: a monthly or yearly subscription, or a one-time purchase. New subscribers get a 1-month free trial on the yearly plan; the subscription then renews at the yearly price unless it is canceled at least 24 hours before the trial ends. Prices for your region are shown on this page.
**Why "Kakuremi"?**
Kakuremi (Japanese: hidden form) refers to the art of concealment. Your secrets deserve to be invisible -- no account to sign into, no service of ours holding them, no fragile code to corrupt them. Just hidden in the file you chose.
Built by Springhiker Inc.
---
Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/
Privacy Policy: https://kakuremi.com/privacy/
Ratings & Reviews
- This app hasn’t received enough ratings or reviews to display an overview.
New in 1.4:
• Stronger encryption for new vaults — vaults created in Kakuremi now use a much stronger Argon2 configuration (32 MiB memory cost), comfortably above desktop KeePass's weak-settings warning threshold. Existing vaults keep their current settings; you can re-tune them anytime with a desktop app such as KeePassXC.
• Precise key-derivation info — Database Settings now shows memory in exact units and flags vaults still using older, lower-strength settings.
• Open Source Licenses — a new row in Settings → About lists the third-party components Kakuremi builds on.
• Reliability — fixed a rare case where two saves could run at the same time.
As always: offline-first and KeePass-compatible, with free, optional YubiKey 5 NFC unlock as a second factor — Kakuremi works without a YubiKey.
The developer, SPRING HIKER CORP., indicated that the app’s privacy practices may include handling of data as described below. For more information, see the developer’s privacy policy .
Data Not Collected
The developer does not collect any data from this app.
Accessibility
The developer has not yet indicated which accessibility features this app supports. Learn More
Information
- Seller
- SPRING HIKER CORP.
- Size
- 8.2 MB
- Category
- Utilities
- Compatibility
Requires iOS 18.0 or later.
- iPhone
Requires iOS 18.0 or later. - iPad
Requires iPadOS 18.0 or later. - Mac
Requires macOS 15.0 or later and a Mac with Apple M1 chip or later. - Apple Vision
Requires visionOS 2.0 or later.
- iPhone
- Languages
English and 8 more
- English, French, German, Italian, Japanese, Korean, Polish, Simplified Chinese, Swedish
- Age Rating
4+
- 4+
- In-App Purchases
Yes
- Kakuremi Pro — Lifetime $49.99
- Kakuremi Pro — Yearly $14.99
- Kakuremi Pro — Monthly $2.99
- Copyright
- © 2026 SPRING HIKER CORP.
