Who we are
iWarden is an open-source, independently developed password manager for iPhone, iPad, Mac, and Apple Watch. It is a client for the Bitwarden protocol: it connects to Bitwarden's cloud (US or EU) or to a self-hosted Bitwarden-compatible server such as Vaultwarden that you operate. iWarden is not affiliated with Bitwarden, Inc.
What we don't collect
iWarden contains no analytics, tracking, advertising, or behavior-monitoring code. Specifically:
- No advertising or marketing SDKs.
- No usage analytics or telemetry about how you use the app.
- No device fingerprinting or cross-app tracking.
- No first-party servers that receive your data. iWarden has no backend to send anything to.
Your vault data
Your logins, notes, cards, identities, and other vault items are stored on your device only in encrypted form and are decrypted in memory solely while you view or edit them. They are synchronized only with the server you configure. iWarden itself never receives, stores, or has any ability to read your vault contents.
Encryption keys and your master password
Your master password is used on-device to derive your encryption keys using the standard Bitwarden key derivation (PBKDF2 or Argon2id). Your master password is never stored and is not transmitted; only the derived authorization hash that the Bitwarden protocol requires is sent to your chosen server to sign in. Encryption keys stay on your device.
Unlock: Face ID, Touch ID, and PIN
Biometric and PIN unlock are handled entirely on your device. Face ID and Touch ID are performed by the system (iOS or macOS); iWarden never sees your biometric data. When you enable quick unlock, iWarden stores your vault key wrapped (encrypted), protected by the device Secure Enclave and Keychain, and unwraps it at unlock time; it is never kept in plain text.
AutoFill
The iWarden AutoFill extension fills credentials from your local, on-device vault directly into apps and websites. Matching and filling happen on your device. Nothing about the sites you visit or the credentials you fill is sent to iWarden.
Clipboard
When you copy a password or verification code, iWarden marks the clipboard as local-only where possible and sets it to clear automatically after a short time, to mitigate the exposure of copied secrets.
Diagnostics and crash reports
iWarden may use Apple's standard, privacy-preserving crash reporting to help fix bugs. Any diagnostic logs are designed to exclude vault contents, passwords, tokens, encryption keys, TOTP secrets, and personal vault metadata. iWarden does not operate its own logging or diagnostics service.
Network connections
iWarden connects only to the Bitwarden-compatible server you select in order to sign in and sync your vault. It makes no other network requests to iWarden-operated services, because none exist.
Third parties
The server you choose (Bitwarden's cloud or your own Vaultwarden/Bitwarden instance) has its own privacy policy that governs data held on that server. iWarden does not share your information with any other third parties.
Children
iWarden is a general-purpose utility and is not directed to children, and it does not knowingly collect data from anyone.
Changes to this policy
If this policy changes, the updated version will be published here with a new "last updated" date. Material changes will be noted in the app's release notes.
Contact
Questions about privacy in iWarden can be raised through the project's GitHub issues.