HiPass Password Vault

HiPass Password Vault is a 100% offline, zero-trust password manager that keeps your sensitive data encrypted and stored exclusively on your device. Nothing ever leaves your phone. Stop trusting the cloud. Start trusting yourself.

WHY HIPASS?

- 100% OFFLINE: No servers, no sync, no cloud. Your data never touches the internet.
- MILITARY-GRADE ENCRYPTION: All passwords encrypted with AES-256-CBC and PBKDF2 key derivation (10,000 iterations).
- MASTER PASSWORD ONLY: Only a salted SHA-256 hash is stored locally for verification. We never see your password.
- ZERO NETWORK PERMISSIONS: The app has no internet access. No tracking, no analytics, no data leakage.


FEATURES:

PASSWORD VAULT
- Store unlimited passwords with website, username, password, notes, and category fields
- Organize by categories: Social Media, Banking, Work, Email, Shopping, Entertainment, Personal, and more
- Add custom fields for 2FA secret keys, expiration dates, or any additional information
- Mark favorites for quick access and view recently used entries
- Full-text search by website name, username, or notes
- Filter by category with an intuitive sidebar navigation

PASSWORD GENERATOR
- Generate cryptographically strong random passwords
- Customizable length (1-64 characters) with toggleable character sets
- Exclude ambiguous characters option (Il1O0)
- One-tap generation and auto-fill

PASSWORD STRENGTH METER
- Real-time strength analysis (Weak, Medium, Strong)
- Visual progress bar with instant feedback
- Score-based evaluation across 7 security criteria

TOTP / TWO-FACTOR AUTHENTICATION
- Built-in TOTP code generator compliant with RFC 6238
- Standard base32-encoded secret key support
- 30-second rolling codes with visual countdown timer
- Fully offline — no network needed for code generation
- One-tap copy TOTP codes to clipboard

SECURITY
- Master password with strength validation (minimum 8 characters, must include uppercase, lowercase, and digit)
- Auto-lock timer configurable from 1 to 30 minutes of inactivity
- Session automatically locks when the app is backgrounded or exited
- All data encrypted at rest using AES-256-CBC
- Encrypted backup export (.enc format) with a separate user-chosen password
- Encrypted import for seamless data migration between devices
- Password expiry date tracking with visual indicators

USER EXPERIENCE
- Clean, modern card-based interface built with Ionic Framework
- Three theme modes: Light, Dark, and Follow System
- Quick copy-to-clipboard with a single tap
- Show/hide password toggle
- Infinite scrolling for large vaults
- Pull-to-refresh
- Responsive layout with sidebar on tablets

SETTINGS AND CUSTOMIZATION
- Change master password at any time
- Configurable auto-lock timeout
- Theme selection: Light, Dark, or Follow System
- Encrypted vault export to external storage
- Encrypted vault import from backup files
- View storage statistics including total entries and favorites count

BACKUP AND RESTORE
- Export entire vault to a single encrypted .enc file
- AES-256 protected backup with your own export password
- Import from backup file seamlessly
- Full data portability between devices


HOW IT WORKS:
1. Create your master password on first launch. This is the only key to your vault and cannot be recovered if forgotten.
2. Add passwords by tapping the + button. Fill in website, username, password, category, notes, TOTP secret, and optional expiration date.
3. Organize and search using the category sidebar, keyword search, or browse by favorites and recent activity.
4. Access with confidence by tapping any entry to view details, copy credentials, generate TOTP codes, or edit and delete.
5. Lock when done by tapping the Lock button or letting auto-lock secure your vault after inactivity.