Passwords & AutoFill

The Passwords tab keeps logins: a title, username, password, website and notes. If you turn on AutoFill, Stillock can fill them in Safari and other apps. It checks them for weak and reused passwords on your device.

If you don't see the tab, turn on Passwords in Settings › Sections.

Add a login

1. In Passwords, tap + (or Add Password).
2. Fill in Title, Username, Password, Website and Notes. Notes are for anything else, such as security questions or PINs.
3. To create a password, tap the dice. Stillock makes a random 20-character password with lowercase and uppercase letters, digits and symbols. Characters that are easy to confuse, such as l, I, O, 0 and 1, are left out.
4. Tap Save.

A strength meter appears under the password while you type. The fields don't offer iOS password suggestions, so iOS doesn't offer to save these logins to iCloud Keychain or the Passwords app.

If Stillock locks while you're editing, your changes are saved. If you had changed the password, the old one is added to the login's notes as "Previous password", in case the change wasn't finished.

Use a login

Tap a login to open it. The password is hidden until you tap the eye button. Tap the copy button next to the username, password or website to copy it.

Copied values stay on this device (not Universal Clipboard) and clear from the clipboard after 60 seconds. Until then, any app you allow to paste can read them.

Tap the pencil to edit. Delete Login is at the bottom of the edit screen. You can also swipe a login, or touch and hold it, for Move and Delete. AutoFill stops offering a deleted login right away.

Passwords are decrypted only while their screen is open. Search finds logins by title and username, never by password.

Password Health

Password Health is at the top of the Passwords tab. It lists:

Group	Meaning
Reused	The same password is used on more than one login.
Weak	The password is easy to guess.
No password saved	The login has no password.

Open a login from the list and tap the dice to replace its password with a strong one. Remember to change it on the website too.

The check runs on your device. Nothing is sent anywhere, so Stillock doesn't check passwords against breach databases. The strength rating looks at length, character variety, repeats and a list of common passwords. It's an estimate: a password rated Strong can still be guessable if it's made of personal information.

AutoFill

Stillock can fill logins in Safari and other apps. AutoFill is off until you turn it on, and until then Stillock keeps no copy of your logins outside the vault.

Turn on AutoFill

1. In Stillock, tap Turn On on the Fill Passwords in Safari & Apps card at the top of Passwords (it appears once you've saved a login). Or open Settings and turn on Fill Passwords in Safari & Apps in the AutoFill section.
2. If iOS doesn't use Stillock for AutoFill yet, the card changes to One More Step for AutoFill. Tap Open AutoFill Settings, or open the iOS Settings app and go to General › AutoFill & Passwords.
3. Turn on Stillock.

If you tap Not Now, the card goes away. You can still turn AutoFill on in Settings › AutoFill.

Fill a login

1. Tap a username or password field in Safari or another app.
2. Choose Stillock from the AutoFill options above the keyboard.
3. Unlock with your Stillock passcode or Face ID.
4. Choose a login. Logins for the site you're on are listed first under Suggested for, and you can search all your logins.

AutoFill always asks you to unlock first, even for a login suggested above the keyboard. It uses the same passcode, Face ID, lockouts and erase limit as the app. Wrong passcodes in AutoFill count toward the same limit.

How AutoFill keeps logins safe

The AutoFill extension can't open the vault itself. While Stillock is unlocked and Fill Passwords in Safari & Apps is on, the app keeps an encrypted copy of your logins (title, username, password, website and folder) where the extension can reach it. The copy is encrypted with a key derived from your vault key, so it opens only when you unlock. Turning AutoFill off, or hiding the Passwords section, deletes the copy.

Logins you add or change in the app are available to AutoFill straight away. Logins synced from another device reach AutoFill on this device after you next unlock the Stillock app here. If AutoFill shows Set Up AutoFill, AutoFill is off in Stillock: open Stillock, unlock it and turn on Fill Passwords in Safari & Apps. Erasing the vault also turns AutoFill off.

Suggest Above Keyboard

Suggest Above Keyboard is off by default. When it's on, Stillock gives iOS the website and username of each login, never the password, so iOS can suggest them above the keyboard. That list is kept by iOS on your device, outside the vault. Turn it off to remove it.

Folders

Tap the folder button to create a folder. Move logins into folders with Move. See Folders.

What passwords don't do

Stillock doesn't import logins from other password managers or export them as a file, and it doesn't store passkeys or two-factor codes. Logins are included in backups.