For iPhone · iPad · Mac
Sherlocked is built exclusively for the Apple ecosystem. Your vault lives in your own iCloud account — end-to-end encrypted, synced across your devices, and never visible to us.
Philosophy
Built in SwiftUI for iPhone, iPad, and Mac. No Electron wrappers, no lowest-common-denominator UI. Sherlocked looks and feels like the rest of your Apple device because it was built that way from day one.
Your vault syncs through your iCloud account using CloudKit. We don't run a vault server. We can't read your data. If we disappeared tomorrow, your vault would still be in your iCloud.
Encrypted backup export is built in. Import from other password managers. Pay $9.99/year or $39.99 once and own it for life — your choice, not ours.
Security
A password manager lives or dies by its cryptography. Here is exactly what Sherlocked does — in plain language, with the primitives named so you can verify.
Your master password is stretched into an encryption key using PBKDF2. The master password itself is never stored, never transmitted, and never leaves your device.
Every item is encrypted with AES-GCM on-device before it's written to CoreData or synced to CloudKit. What Apple and we can see is indistinguishable from random bytes.
Face ID and Touch ID unlock your vault using the Secure Enclave. For any item you mark Super-Secret, biometrics alone aren't enough — Sherlocked asks for your master password every time. A privacy overlay hides everything the moment you switch apps.
When you share an item, Sherlocked uses X25519 key agreement with QR-code contact exchange. The shared item is encrypted end-to-end to the recipient's key — not ours, not Apple's.
Full passkey support: registration and assertion via the Credential Provider Extension. AutoFill works in Safari and any app that adopts the system AutoFill APIs.
We don't operate a server that holds your vault. There is no account with us. If a court subpoenaed us tomorrow, we'd have nothing to hand over — because we never had it in the first place.
Features
Passwords, credit cards, bank accounts, Wi-Fi, API keys, frequent-flyer numbers, notes, and scanned documents — organized by tags, colors, and favorites.
Opt individual items into a second gate: even with Face ID on, Sherlocked requires your master password each time you view or copy them. For the handful of things that really matter.
A Credential Provider Extension feeds passwords, passkeys, and one-time codes into Safari and any app that supports system AutoFill.
TOTP code generation with a visual countdown and one-tap copy. No second authenticator app needed.
Exchange contacts with a QR code, then share items end-to-end encrypted. Track what's pending in a shared inbox.
Open the app on your iPhone, finish on your Mac. Sync is automatic, native, and travels through your own iCloud.
OCR for credit cards. Scan driver's licenses, insurance cards, and receipts straight into encrypted storage.
Customizable length, character sets, and patterns for when a site has… opinions about what a password should look like.
Come in from another password manager without drama. Take an encrypted backup with you whenever you want.
Every screen is labeled and navigable with VoiceOver. Accessibility is not a v2 feature.
See it
Six moments that show what makes Sherlocked different.
Pricing
Auto-renewing. Cancel anytime in Settings.
Pay once. Own it. No renewals, ever.
