Your passwords and notes, in your pocket.
End-to-end sync now works on iOS and Android — your full encrypted vault pulls from the server, decrypts on-device with the same master password as desktop, and opens with every page and secret intact. The apps themselves are not yet released: both store submissions are under review with Apple and Google.
Get notified when it hits the App Store and Play Store
No spam. One email when it ships.
What it does
A fast, native companion for your desktop vault — same Rust crypto, same Git, same encryption keys. v2.0 ships with auto-pull, nested folders, configurable auto-lock, and an FTS5 search overhaul.
Nested folder hierarchy
Pages, folders, and tags from your desktop app — organized exactly the way you left them, including any depth of subfolders. Pages, Tags, Secrets, and Search all walk the tree recursively, so nothing in a subfolder is left behind.
Copy passwords and details
Tap to copy passwords, credit cards, and any private info. Clipboard auto-clears after 30 seconds.
Biometric unlock + configurable auto-lock
Face ID and fingerprint on iOS and Android, auto-enabled on first password unlock. Pair it with a configurable auto-lock timer that's foreground/background-aware — so the vault locks correctly whether you switched apps or just stopped typing.
Global search, FTS5 overhaul
One search experience across every tab. New unicode-aware FTS5 tokenizer, automatic AND→OR fallback so partial matches still surface, scope picker (notes / secrets / both), substring LIKE toggle, and a reindex tool.
Auto-pull from server
Bring the app to the foreground — it pulls. Stay open — it pulls again every 60 seconds. Notes / Folders / Secrets / Search all refresh automatically. Manual refresh stays available in the header for biometric-unlock sessions.
Sync badge on every tab
The Claspt brand mark and tab name now sit on every tab, alongside a compact sync badge with the current synced version, how long ago the last sync happened, and a refresh button that actually pulls and reloads.
How it connects
Mobile pulls your full encrypted vault from the server, decrypts it on-device, and opens it. After the first sync, edits push back over the same end-to-end encrypted channel.
Desktop stores your passwords and notes
Pages, folders, passwords, encryption — everything starts on the desktop app.
Cloud sync encrypts and pushes
Your data is encrypted on your computer with AES-256-GCM, then pushed to Claspt Cloud (Pro+) as opaque encrypted bundles. The server stores ciphertext only — it never sees your master password or any plaintext.
Mobile downloads and unlocks locally
The mobile app fetches the manifest, derives the same group key from your master password, downloads each encrypted bundle, and decrypts and unpacks it through the shared claspt-core Rust crate (via UniFFI) — the exact code path desktop uses. Nothing is ever decrypted in the cloud.
On first setup mobile pulls your vault read-only. After your first edit on mobile, incremental pushes flow both ways. Your Desktop app stays the primary place for setup, imports, and bulk edits.
What you'll need
Three things to be ready when mobile launches.
The Claspt Desktop app Free
Set up your passwords and notes here first. It's where all your data lives.
A Pro+ ($8/mo) plan
Cloud sync is required to get your passwords and notes on mobile. See pricing
iOS 16+ or Android 12+
Native apps for both platforms. Optimized for biometric hardware and secure enclave storage.
Start with Desktop
While we build the mobile app, start with the Desktop app. It's free, and your passwords and notes will be ready to sync when mobile launches.
Part of the ecosystem
Your passwords and notes live on Desktop. Mobile and Extension extend it.