For Mac and iPhone

Say the password.

Your two-factor codes, encrypted with a password only you know, synced through your own iCloud, and filled in with one click.

Everything a 2FA app should do.
Nothing it shouldn't.

All your codes.
One glance.

Search, click to copy, done. Codes turn red in their last five seconds.

The account list with GitHub, Google, Stripe and other accounts and their current codes

One click in Safari.

It knows the site you're on and fills the code for you.

The Safari extension suggesting the GitHub account with an Autofill button

Encryption.

The vault is encrypted on the device. The key opens with your master password.

Scan a code on screen.

Drag the scanner over a QR code. It reads only the area you point at.

Touch ID.

One Touch ID unlocks the app and the Safari extension together, until your Mac locks.

Sync.

Your Mac and iPhone stay in sync through iCloud. If you edit on both at once, nothing gets overwritten.

  • Version history
  • Recently Deleted for 30 days
  • Export any time
  • Import from other apps

No account with us.

The vault is encrypted with AES-256 before it syncs into your iCloud Drive. There is no server here, and no analytics.

Get Say The Password

Free, on macOS 26 and iOS 26.

Mac

Includes the Safari extension.

Download

iPhone

Private beta on TestFlight.

Invite only

Questions

What happens if I forget my master password?

It can't be recovered or reset. Store it in a password manager, and keep an encrypted backup somewhere safe.

Can I move my accounts from another authenticator?

Yes. Paste or import otpauth:// links, scan each setup QR code, or open a Say The Password backup.

Does it work without iCloud?

Yes. With iCloud Drive off, your vault stays on the device, with the same encryption and version history.

Do you see my codes or collect any data?

No. There is no server and no analytics. Your encrypted vault lives only on your devices and in your own iCloud Drive. See the privacy policy.

So what is the password?

A master password you choose. We never see it, and we can't reset it. (The one in the garden, though, is just good manners.)