On the phone
Still to write — what the app looks like in your hand, and what it is for.
What it does
A vault on your server and a fill provider on the phone. Logins and one-time codes go straight into other apps and into the browser — no copy-paste, no clipboard for another app to read. The TOTP secret sits beside the password it belongs to, so a second factor is one tap instead of a second device.
Passwords on iPhone, end to end
The whole path, in one take and on a real phone. Officer registers as an AutoFill provider in iOS Settings, alongside the ones already there. Then a login on a website gets filled from the vault, a passkey signs in without a password at all, and a BTCPay Server account takes both its password and its two-factor code — the TOTP arriving straight from the entry it belongs to, rather than from a second app on a second screen. Nothing is typed and nothing goes through the clipboard.
Why it works this way
Every other protection you have runs through this one. Take someone's mailbox and you have their password resets; take the resets and you have everything else. A vault is therefore the actual key to the rest of a life — which is exactly why it should not be a subscription to a company that can be breached, acquired, or handed a warrant. Yours is a Vaultwarden on your own machine, reachable only across the mesh.
On the server
Still to write — which sidecar backs it and what that process is responsible for.