Krypton Pass

Krypton Pass - Offline Password Manager & Authenticator

Your passwords belong to you. Not a server. Not a company. Not the cloud.

Krypton Pass is a privacy-first, offline password manager for Android. Every item you store is encrypted directly on your device using AES-256-GCM with Argon2id key derivation. Nothing ever leaves your phone unless you choose to back it up, and even then, it leaves fully encrypted. There is no registration, no cloud account, and no way for anyone including the developer to access your data.

No accounts. No subscriptions. No telemetry. No ads. Pay once, own it forever.

WHAT YOU CAN STORE
Krypton Pass is more than a password manager. Store Logins with URL and username, Secure Notes for private text, Cards with full card details, and Identities with name, email, phone, address, and birthday. Organize everything with folders and tags, and search across your entire vault in real time.

KRYPTONAUTH - BUILT-IN AUTHENTICATOR
Stop switching apps for two-factor codes. KryptonAuth is a fully integrated TOTP authenticator that lives inside your encrypted vault. Add accounts by scanning a QR code or entering a secret manually. Supports SHA-1 & SHA-256 algorithms, custom digit counts, and custom periods, covering every major service from Google and GitHub to banking apps. Your 2FA secrets are encrypted alongside your passwords. One vault, everything protected.

PASSWORD GENERATOR AND STRENGTH CHECKER
Generate cryptographically random passwords from 8 to 64 characters. Control uppercase, lowercase, numbers, and special character counts. See strength score and entropy in real time. The built-in Strength Checker analyzes any existing password with entropy scores, composition breakdown, and estimated crack times across five real-world attack scenarios including throttled online attacks and offline GPU attacks against Argon2id. Nothing you type ever leaves your device.

ENCRYPTION
- AES-256-GCM authenticated encryption
- Argon2id key derivation (t=3, m=32MB) - memory-hard and GPU-resistant
- 32-byte random salt stored in the Android Keystore, separate from the vault file
- A new nonce is generated on every single write
- Encryption key lives in RAM only and is zeroed immediately on lock
- Your master password is never stored anywhere, ever

MULTIPLE VAULTS
Create and manage multiple separate vaults on one device. Each vault has its own master password, its own encryption key, its own salt, and its own backup configuration. Personal, work, and shared credentials kept cleanly separate.

BACKUP YOUR WAY
Local Auto Backup: Encrypted .kpenc backup saved to a folder you choose on a schedule you set.
Google Drive: Encrypted backup uploaded directly to your Drive. The app uses drive.file scope only and cannot see anything else in your account.
WebDAV / Nextcloud: Self-host your backups on your own server.
Export and Import: Move vaults as encrypted .kpenc files between devices, or import and export CSV to migrate from another password manager.

SECURITY FEATURES
- Biometric unlock via fingerprint or face recognition
- Auto-lock after 1, 5, 15, 30, or 60 minutes of inactivity, or immediately on background
- Screenshot and screen recording blocked by default
- System backup excluded via allowBackup="false"
- Change master password anytime with full automatic re-encryption

PRIVACY
Zero data collected. No analytics SDKs, no crash reporters, no backend servers. The app makes network requests only when you explicitly enable cloud backup, and fetches favicons to display icons next to vault entries. Camera is used only to scan QR codes for TOTP. Full privacy policy: https://kryptonpass.in/privacypolicy/

Requires Android 6.0 or higher. Questions or support: kryptonpass@gmail.com