Basalt – Passwort Manager

Basalt is your digital keyring—easy, local, and without a provider account.

Store login credentials, secure notes, one-time codes, and passkeys in an encrypted vault. Your data leaves your device only as encrypted text. No Basalt server. No telemetry.

A CREDENTIAL MANAGER—NOT JUST PASSWORDS

Passwords remain. TOTP remains. Passkeys are coming. Basalt treats all three equally: as fully-fledged entries in a vault that only you can open.

NO ACCOUNT. NO SUBSCRIPTION REQUIRED.

• Vault, TOTP, Generator, AutoFill, and Passkeys: Free

• Sync with folders or Nextcloud: One-time purchase

WHAT BASALT CAN DO

Vault & Entries
• Encrypted local vault
• Logins, notes, TOTP, passkeys
• Quick search, filters, and favorites
• Recycle bin for restoring

Security
• Auto-lock and background lock
• Scheduled clipboard clearing
• Optional Face ID / Touch ID
• Local password health
• Optional leak check (Have I Been Pwned, k-anonymity)

Tools
• Password generator with clear strength indicator
• Live authenticator codes (TOTP)

• Import from popular password managers (including Bitwarden, 1Password, Chrome, KeePass)

• CSV export

AutoFill & Passkeys

• iOS password autofill

• Passkey providers (after activation in settings)

• Seamless autofill In apps and Safari

Sync — when you need it

• Folder sync (e.g., with iCloud Drive, Dropbox, or Syncthing at the file level)

• Nextcloud with secure browser login

• Encrypted files only — Zero Knowledge literally

PRIVACY IMPORTANT

Basalt doesn't know you. There is no Basalt account and no data recovery service. If you lose your master password, the data is unrecoverable — this is both intentional and a form of protection.

Basalt — your login credentials. Secure. Only on this device.

ACCESSIBILITY SERVICE API NOTE

Basalt is not an accessibility tool for people with disabilities. To fill in login credentials, Basalt primarily uses the Android Autofill API and the Credential Provider — these are more limited system interfaces.

Optionally, Basalt can use the AccessibilityService API to supplement AutoFill if the AutoFill framework doesn't reliably detect login fields in an app or browser. If you enable this service in your Android settings, Basalt will only search for login fields (such as username and password), associate them with a vault entry, and insert credentials only after your confirmation.

Basalt does not store any screen content, control any interface other than inserting credentials, modify any system settings, or transmit any data read through the AccessibilityService API to Basalt or third parties. You can disable the service at any time in your Android settings. Without this service, Basalt remains fully functional (manual copying and Android AutoFill, if supported by the system).