Maicro Vault

Maicro Credential Vault keeps your sensitive data locked in a single encrypted file — with no accounts, no cloud login, and no recovery.

Your vault is protected by AES-256-GCM authenticated encryption with a master secret only you know. We never see your data. We never have it. We can't reset it, and neither can anyone else.

PAY ONCE, OWN IT
A single $4.99 purchase unlocks the full app — no subscriptions, no "pro" tier, no upsells. Companion iOS and Web apps sold separately on their stores.

YOUR CLOUD, YOUR KEYS
Sync your encrypted .safe file across devices using your own Google Drive or Dropbox account. The file that travels through the cloud is already encrypted — Google and Dropbox see ciphertext, nothing more. You can also use Maicro Vault fully offline and never sync.

CROSS-PLATFORM BY DESIGN
One .safe file, three platforms: Android, iOS, and Web. Edit on your phone, open on your laptop, and the change flows through your own cloud storage. Conflicts use last-write-wins with a clear three-button dialog (Keep Local / Keep Remote / Cancel) when two devices edit at the same time.

FEATURES
• AES-256-GCM authenticated encryption
• Argon2id key derivation (modern, memory-hard)
• Single encrypted .safe vault file
• Sync via your own Google Drive or Dropbox (OAuth, no password sharing)
• No accounts, no email, no registration
• Biometric unlock (fingerprint / face unlock via BiometricPrompt)
• Auto-lock after inactivity
• Clipboard auto-clear after 30 seconds
• Folders for organizing credentials
• Fast search across titles, usernames, notes, and custom fields
• Built-in password generator
• Custom hidden fields for 2FA codes, recovery phrases, and anything else
• Per-credential notes
• Open URLs directly from a credential
• Dark mode aware

PRIVACY FIRST
Maicro runs no servers, no analytics, and no tracking. Your vault file lives on your device and — if you choose — in your own cloud storage. We cannot access, recover, or reset your data. Ever. The Google Drive and Dropbox integrations only touch the files you explicitly pick; we use the narrowest scopes available (drive.file for Drive, files.content.* for Dropbox).

NO RECOVERY BY DESIGN
If you forget your master secret, your data is permanently inaccessible. This is a security feature, not a limitation — any "recovery" path would be a backdoor. The app warns you during setup and asks for confirmation before each destructive action.

WHO IT'S FOR
• People who don't want another password manager that owns their data
• Engineers, security researchers, and journalists who need real end-to-end encryption
• Anyone who wants to keep their secrets on storage they already trust

WHO IT'S NOT FOR
• People who want cloud-side password recovery — we deliberately can't offer that
• Teams or families that want shared vaults — single-user only at launch
• People who won't read a clear "no recovery" warning before choosing their master secret

SECURITY AT A GLANCE
• AES-256-GCM authenticated encryption for the vault body
• Argon2id password-based key derivation (32-byte salt, OWASP-tuned)
• RFC 3394 AES Key Wrap for the Vault Encryption Key
• AAD binds ciphertext to format version (rollback-resistant)
• Identical encrypted file format across Android, iOS, and Web — verified byte-for-byte by automated cross-platform tests
• OAuth tokens stored in EncryptedSharedPreferences on Android

SUPPORT
Questions or bugs? support@maicrovault.com. We read every email.

Full privacy policy: https://www.maicrovault.com/privacy
Terms of service: https://www.maicrovault.com/terms
Security statement: https://www.maicrovault.com/security