Reflib PWD
密码管理器最大的风险，是把所有人的密码都堆在同一个云端数据库里。这一款干脆不做云：整个 App 里没有一行联网代码。 The biggest risk in a password manager is piling everyone’s secrets into one cloud database. This one skips the cloud entirely — there isn’t a single line of networking code in it.
该有的都有，除了云Everything but the cloud
系统自动填充System AutoFill
注册为 iOS 的密码自动填充来源，在 Safari 与其他应用的登录框上方直接弹出候选账号，不必来回切换 App 复制粘贴。Registers as an iOS AutoFill provider, so matching accounts appear right above the login field in Safari and other apps — no switching back and forth to copy and paste.
TOTP 二步验证Built-in TOTP
扫描二维码或粘贴 otpauth 链接即可托管动态验证码，密码与验证码放在一起，登录时少开一个 App。Scan a QR code or paste an otpauth link to host one-time codes alongside the password itself, so signing in means one fewer app to open.
密码生成器Password generator
按长度与字符集生成强密码，可排除容易混淆的字符，生成后直接存入条目。Generate strong passwords by length and character set, optionally excluding look-alike characters, and save straight into an entry.
Face ID 解锁Face ID unlock
用 Face ID 或 Touch ID 解锁密码库与自动填充。生物特征由系统安全隔区处理，应用只知道验证成功与否。Unlock the vault and AutoFill with Face ID or Touch ID. Biometrics are handled by the Secure Enclave; the app only learns whether verification passed.
计算器伪装Calculator disguise
可切换成计算器外观与图标，在主屏上看起来只是个普通计算器，输入约定的内容才进入密码库。Switch to a calculator appearance and icon so the app looks ordinary on the Home Screen; entering the agreed input opens the vault.
导入与导出Import and export
支持从 Chrome、Apple「密码」及通用 CSV / XML 导入，也能导出以便迁移到其他密码管理器——你的数据不会被锁死在这里。Import from Chrome, Apple Passwords and generic CSV/XML, and export to move on to another manager. Your data is never locked in here.
弱密码分析Weak-password review
在本地扫描密码库，找出过短、过于简单或重复使用的密码，逐条提示你该换哪些。分析全程在设备上完成。Scans the vault locally for passwords that are too short, too simple or reused, and tells you which ones to change. The whole analysis runs on device.
备份与回收站Backups and trash
支持定时本地备份与导出提醒，误删的条目会先进回收站，可以撤销。还能生成 PDF 存档用于离线保管。Scheduled local backups and export reminders, with deleted entries landing in a recoverable trash first. PDF archives are available for offline safekeeping.
这款应用怎么处理数据How this app handles data
没有云，也就没有可以被拖库的地方No cloud means no database to breach
密码库保存在设备本地的 App Group 容器中，供自动填充扩展读取。应用未启用 CloudKit，不会同步到 iCloud，也没有账号体系。整个 App 不含任何网络请求代码，你可以在飞行模式下完整使用它。The vault lives in an on-device App Group container that the AutoFill extension reads from. CloudKit is not enabled, so nothing syncs to iCloud, and there is no account system. The app contains no networking code at all — you can use every part of it in airplane mode.
库内数据的静态保护依赖 iOS 的数据保护机制：当 iPhone 设置了锁屏密码时，沙盒中的文件由系统在硬件层面加密，未解锁的设备无法读取。因此请务必为设备设置足够强的锁屏密码并开启 Face ID——对这款应用来说，这不是可选项。 At-rest protection relies on iOS Data Protection: when your iPhone has a passcode, sandbox files are encrypted by the system at the hardware level and can’t be read on a locked device. So do set a strong passcode and enable Face ID — for this app in particular, that isn’t optional.
同样地，请不要在越狱设备上使用密码管理器：越狱会绕过沙盒隔离，使任何应用的本地数据都失去保护。 By the same token, don’t run a password manager on a jailbroken device: jailbreaking bypasses sandbox isolation and removes that protection from every app’s local data.
应用只申请两项权限：Face ID / Touch ID 用于解锁，相机用于扫描 TOTP 二维码。没有网络权限、没有通讯录、没有位置。 Only two permissions are requested: Face ID / Touch ID to unlock and Camera to scan TOTP QR codes. No network, no contacts, no location.
导出文件是明文的Exported files are plain text
为了让你能自由迁移到其他密码管理器，CSV / XML 导出与 PDF 存档均为明文，任何拿到文件的人都能直接读到密码。导出后请立即转存到安全位置，并清理「文件」App 与分享记录中的临时副本。So that you can migrate freely to another manager, CSV/XML exports and PDF archives are plain text — anyone holding the file can read the passwords. Move exports somewhere safe right away and clear temporary copies from the Files app and your share history.
常见问题Common questions
不能同步，换手机怎么办？Without sync, what happens when I change phones?
用应用内的导出功能生成备份文件，通过 AirDrop 或加密的方式传到新设备再导入。这确实比自动同步麻烦，但换来的是没有任何一份副本躺在别人的服务器上——这就是这款应用的取舍。Export a backup from inside the app and move it to the new device over AirDrop or another encrypted channel, then import. It is genuinely more work than automatic sync, and what you get in return is that no copy ever sits on someone else’s server. That’s the trade this app makes.
若你在系统设置中为本应用开启了 iCloud 云备份，整机恢复时数据也会一并带到新设备。If you have iCloud Backup enabled for this app in iOS Settings, a full device restore will also carry the data across.
忘记 Face ID 之外的解锁方式会怎样？What if biometric unlock fails?
生物识别失败时会回落到设备密码验证。由于我们不持有你的任何数据，也不存在「找回密码」这样的服务端流程——请确保自己保有可用的备份。Biometric failure falls back to your device passcode. Because we hold none of your data, there is no server-side “recover my account” flow — make sure you keep a working backup.
和系统自带的「密码」App 有什么区别？How is this different from Apple’s Passwords app?
Apple 的方案依托 iCloud 钥匙串，跨设备同步很方便，但数据会存在 Apple 的基础设施上。Reflib PWD 走的是另一条路：数据只在这一台设备上，代价是需要你自己管理备份与迁移。另外它提供 TOTP 托管、伪装图标与本地弱密码分析等系统方案没有的功能。Apple’s solution is built on iCloud Keychain: convenient cross-device sync, with the data living on Apple’s infrastructure. Reflib PWD takes the other route — the data stays on this one device, and you handle backups and migration yourself. It also adds TOTP hosting, a disguised icon and local weak-password analysis, which the system app doesn’t offer.
你们能帮我恢复丢失的密码吗？Can you help me recover a lost vault?
不能，而且这正是设计意图。我们手上没有你的任何数据副本，技术上无法恢复。请定期导出备份并妥善保管，这是唯一的保险。No, and that is the point. We hold no copy of your data, so recovery is technically impossible on our side. Export backups regularly and keep them somewhere safe — that is the only insurance there is.