mylockr Support
mylockr is a zero-knowledge password manager for iPhone, Mac and browsers (Chrome, Brave, Edge and Firefox); Windows is coming soon. Your vault is encrypted on your device with your master password and your Secret Key; nobody else, including the developer, can read it. Downloads: Download mylockr.
Türkçe: Destek
Contact
Email mypasssecure37@gmail.com, in English or Turkish. Please include:
- the device and system version (for example iPhone with iOS 26, Mac with macOS 26, or Chrome on Windows),
- the mylockr version, if you know it,
- what you did, what you expected and what happened, with the exact text of any error message.
Never send your master password, your Secret Key, your recovery kit or a screenshot of it. We will never ask for them, and we cannot use them to help you: support has no access to your vault. Your account ID (shown in Settings) is the only identifier we may need, and only to delete your account.
I forgot my master password
It cannot be recovered or reset, by you or by us. The master password is never stored or sent anywhere, and your recovery kit contains only your Secret Key, not the master password.
If a device still unlocks with Face ID or Touch ID, export your items now (Settings › Export…, encrypted file) while it still works. Without the master password the vault cannot be opened, so you would need to create a new account and import that file.
I lost a device, or it was stolen
The vault on that device is encrypted and opens only with your master password, or with that device's Face ID or Touch ID if you turned it on. mylockr has no list of devices to remove remotely. To lock the lost device out, on another device where mylockr is unlocked:
- choose Renew Secret Key (Settings › Security on the Mac, Settings › Account on iPhone) and keep Also rotate the vault key turned on. The old Secret Key and recovery kit stop working; save the new recovery kit right away.
- consider changing your master password too (Change master password).
You need to be online. Your other devices and browsers ask once for the new Secret Key (from the new kit) and your master password. If you have no other device, set up a new one with your recovery kit and master password (below), then do the same there.
Setting up a new device
Install mylockr, choose Log in to an existing account and enter your Secret Key and master password. You get the Secret Key in one of these ways:
- From another device: unlock mylockr there and open Recovery kit (Settings), then on the new iPhone tap Scan recovery kit QR code.
- From your recovery kit: scan its QR code with the iPhone's Camera app (mylockr opens with the Secret Key filled in), or type the Secret Key (
ML1-…; a Secret Key starting withMP1-from an older kit works too).
The master password is always typed by you. Your items are then synced to the new device.
Using AutoFill on iPhone
- In mylockr, turn on Unlock with Face ID (or Touch ID) in Settings. AutoFill opens your vault only with Face ID or Touch ID, never with the master password.
- In the iPhone's Settings app, go to General › AutoFill & Passwords and turn on mylockr.
When you sign in on a website or in an app, tap the login suggestion or the key icon above the keyboard and choose a login from mylockr.
Installing on a Mac
mylockr for Mac needs a Mac with Apple silicon (M1 or later) and macOS 11 or later; AutoFill needs macOS 14 or later.
- Download the DMG file from the download page.
- Open it and drag mylockr onto the Applications folder, then eject the disk image.
- Open mylockr from Applications. macOS asks once whether to open an app downloaded from the Internet; choose Open.
mylockr is signed with the developer's Apple Developer ID and notarized by Apple, so Gatekeeper opens it normally; you never need to change security settings or right-click to open it. If macOS says mylockr cannot be checked or is damaged, do not open it: download it again from the download page. To check a download, compare the output of shasum -a 256 ~/Downloads/mylockr_*.dmg in Terminal with the SHA-256 shown for the file on the release page.
Using AutoFill on a Mac
AutoFill on the Mac needs macOS 14 or later.
- In mylockr, turn on Unlock with Touch ID (Settings › Security). AutoFill opens your vault only with Touch ID, never with the master password.
- In System Settings, go to General › AutoFill & Passwords and turn on mylockr.
When you sign in on a website or in an app, choose the mylockr suggestion or open the passwords list from the login field, then pick a login and confirm with Touch ID. If mylockr cannot open the vault (for example after a restart), choose Open mylockr, unlock it with your master password and try again.
Quick Access (Mac and Windows)
Quick Access lets you sign in to apps that a browser extension cannot reach, such as a remote desktop client. Press the shortcut (⌃⌥P on the Mac, Ctrl+Shift+Space on Windows; change it in Settings › Keyboard shortcuts) in the app you want to sign in to. A small search window opens: type part of the name, move with the arrow keys and press Return to type the username and password into that app (mylockr presses Return afterwards; turn off Press Return after typing if you don't want that). You can also choose Type password, Copy username or Copy password. Esc closes the window.
On the Mac, typing into other apps needs the Accessibility permission: the first time, Quick Access shows Open Accessibility settings; turn on mylockr in System Settings › Privacy & Security › Accessibility, then press the shortcut again. Until then, the copy actions work. mylockr uses this permission only to type the login you picked; nothing is recorded or sent. Remote desktop and virtual machine apps are recognised automatically; you can add others in Settings › Keyboard shortcuts › Quick Access › Remote desktop apps.
Windows
mylockr for Windows is coming soon. Windows Hello unlock, Quick Access and unlocking the browser extension through the app are being prepared; the download page will link to it when it is available.
Face ID and Touch ID
Turn them on in Settings › Unlock with Face ID (iPhone) or Unlock with Touch ID (Mac, Settings › Security); you confirm with your master password once. By default mylockr still asks for the master password every 14 days and after a restart, so that you don't forget it; you can change this under Ask for the master password. If a face or fingerprint is added to the device, mylockr asks for the master password once before Face ID or Touch ID works again. mylockr never receives your face or fingerprint data.
Browser extension
- Installing: the extension works in Chrome, Brave, Edge and other Chromium-based browsers (from the Chrome Web Store) and in Firefox 140 or later on the desktop (from Firefox Add-ons). Both listings are coming soon; the download page will link to them.
- Setting up: open the mylockr extension, enter your Secret Key (or recovery kit link) and your master password, and choose Sign in.
- Touch ID in the browser (Mac): in the extension's settings choose Turn on Touch ID unlock. In browsers whose passkeys cannot do this (for example Brave or Firefox), unlock through the Mac app instead: in the Mac app turn on Unlock with Touch ID and Allow browser extension unlock (Settings › Security), then choose Pair with the mylockr app (macOS) in the extension's settings. Each unlock shows a Touch ID prompt naming the browser. Paired browsers can be removed in the Mac app (Forget).
- Inline suggestions are off by default; turn them on in the extension's settings if you want mylockr to suggest and save logins on web pages.
Exporting your data
In the iPhone or Mac app go to Settings › Export… (on the Mac under Export & import). Choose an Encrypted file (recommended), which can be imported into mylockr again and is protected by an export password you choose, or a Plain-text CSV for another password manager. A CSV file is not encrypted: delete it once you have imported it. On iPhone the file is saved in Files › On My iPhone › mylockr. The browser extension cannot export.
Deleting your account
- In the app: Settings › Delete account… (on the Mac under Delete…), or in the extension's settings Delete account…. You confirm with your master password and by typing DELETE. This deletes every item on the server, your login and the data on that device. It cannot be undone; export an encrypted file first if you might need your items again. Other devices keep their copies until you choose Remove from this device there.
- Without the app: email your account ID (Settings › Sync in the app, or the extension's settings) to mypasssecure37@gmail.com. We delete the account within 30 days and confirm by reply.
Details: Privacy Policy, Retention and deletion.
Renewing your Secret Key
If your Secret Key or recovery kit may have been seen by someone (a photo, a screenshot, a lost printout), choose Renew Secret Key (Settings › Security on the Mac, Settings › Account on iPhone). You get a new Secret Key and a new recovery kit, shown right away; print or save it before you continue. The old ones stop working. Your master password and your items stay the same. Changing the master password does not change the Secret Key or the recovery kit.
Security
To report a security vulnerability, email mypasssecure37@gmail.com with "Security" in the subject, in English or Turkish. Describe the issue and how to reproduce it; please give us a reasonable time to fix it before you publish it. We reply within a few days and credit you if you wish. Never include real passwords, Secret Keys or other people's data in a report. Machine-readable contact: security.txt.
Privacy
mylockr has no ads, analytics or tracking and does not ask for your name or email address. Read the Privacy Policy.