Ironclad

Ironclad is a local-first password manager built around one principle:
your secrets never leave your device.

🔐 MILITARY-GRADE ENCRYPTION
Every password is encrypted with AES-256-GCM using a unique nonce.
Your master password is never stored — only a PBKDF2-derived key with
600,000 iterations protects your vault.

🦠 BREACH DETECTION
Ironclad checks your passwords against Have I Been Pwned using k-anonymity
— your actual passwords are never sent over the network.

🔑 BIOMETRIC UNLOCK
Use fingerprint or face recognition to unlock quickly. The master key is
stored in Android's hardware-backed Keystore.

🔒 ZERO CLOUD
No sync. No account. No cloud. Your vault exists only on your device,
encrypted at rest.

⚡ FEATURES
• AES-256-GCM encryption per entry
• PBKDF2-HMAC-SHA256 key derivation (600,000 iterations)
• Biometric unlock (fingerprint / face)
• Breach detection via Have I Been Pwned
• Password strength analysis
• Reused password detection
• Secure password generator (length 8–64, symbols, digits, uppercase)
• Auto-lock on inactivity and app background
• Clipboard auto-clear after 30 seconds
• Security dashboard with actionable insights

OPEN SOURCE CRYPTOGRAPHY
Built on industry-standard libraries with no proprietary encryption.