Latch App Icon

Latch

A local-first vault for passwords and TOTP codes. Keep secrets on your device, organized and protected by Keychain and device authentication.

Local Only TOTP 2FA Keychain iOS iPadOS
Latch Screenshot 1
Latch Screenshot 2
Latch Screenshot 3

Features

Practical tools for day-to-day credential security.

Local Vault

Create and manage entries with service, username, notes, tags, favorites, and optional TOTP setup.

Keychain Secret Storage

Passwords and TOTP secrets are stored in Apple Keychain, while metadata stays local in app-managed storage.

Password Generator

Generate strong credentials with configurable length, numbers, and symbols before saving to the vault.

Security Review

Get quick health findings for weak or reused passwords and missing 2FA so problems are easy to spot.

Biometric Vault Lock

Protect sensitive actions with biometric or device-owner authentication and optional auto-lock intervals.

User-Controlled Defaults

Choose unlock behavior, auto-lock timing, appearance, accent theme, and password generator preferences.

Privacy Policy

Last updated: March 2026

Latch is local-first. Passwords and TOTP secrets stay on-device in Apple Keychain.

Data Collection

Latch is built around local ownership. The app does not require accounts and does not use analytics or ad trackers. In normal use, your vault data remains on your device.

  • Does not require account creation or sign-in
  • Does not rely on cloud sync in the current implementation
  • Does not track your usage or behavior with third-party analytics
  • Does not include third-party advertising SDKs or trackers
  • Does not sell your data to third parties

How Data Is Stored

Latch separates sensitive secrets from metadata to reduce exposure and use platform protections effectively:

  • Passwords are stored in Apple Keychain
  • TOTP secrets are stored in Apple Keychain
  • Entry metadata (service, username, notes, tags, favorites, timestamps) is stored locally in app storage
  • You can remove app data at any time by deleting the app

Security Behaviors

Latch supports optional biometric unlock, app-level auto-lock after background inactivity, and re-authentication before revealing or copying sensitive values.

Interoperability

Latch supports CSV import for passwords and per-entry TOTP export to avoid lock-in and help you move your data when needed.

Changes to This Policy

If we make material changes to this page, we will update the policy here and revise the date above.

Contact

If you have any questions about this privacy policy or Latch, please contact us at feedback@appsbyjosh.com.

Open Source

Latch is open source and available on GitHub. Explore the codebase, report issues, and contribute improvements to local-first credential security.

Support

Need help with Latch? We are here for you.