Pin Keeper (Pins/Passwords)

About the developer:

30 years of IT experience working as a contractor for most of the major companies in the world.

"I know enough about the cloud not to trust it with my own personal security critical information"

This application's main feature is its simplicity it doesn't try to do any funky stuff with your valuable data. Unlike many other apps it doesn't try to store or back up your pins and passwords over the Internet it doesn't try and look into your contacts or request inappropriate permissions!

Simple is safe as there are less chances of data being miss-handled and made unintentionally visible. You always have control of your data and you will always hold the keys to your lock! No in-app purchases, or adverts ever!

Note - Huawei and some other phones as a separate security feature, ask you if you want to grant the application access to your contacts. This application doesn't need such access nor does it request it.

All your data is kept encrypted using AES256 with all of its cryptographic attributes (Random salt, SHA IV high number of cycles etc,) and kept on your phone's application private storage.

Key Lock uses both a PIN and an encryption phrase. The encryption phrase is never stored on your phone and must to be entered every time therefore making it very hard for anyone to ever decrypt your data if you lose your phone.

When the application is sent to the background it is automatically locks itself again so there is no chance of you forgetting to re-lock it and leaving pins visible. Note however that the application will not be automatically closed if you just lock the screen in this case you must exit the app before locking the phone.


NOTE:

1. I/we cannot recover your password or key phrase if you lose them. The only way to restart is to uninstall and reinstall the application. Deleting the app also deletes all of your PIN data. This means that a Google initiated remote phone wipe should in theory also remove all your pin data. Keep a copy of you pins in a safe.
2. If your phone is rooted then anything stored on it will be less safe since private storage is accessible by any other application granted root privileges. Additionally such root empowered applications could implement ways to block read this application's memory so potentially capturing master pin and encryption keys.
3. If you let google back up your data, passwords app configurations etc.; i.e. the kind of backup that then allows you to restore to a new phone. The data block where pin keeper keeps your passwords will also be transmitted by your android phone to google over the internet and stored on their server. The pins will remain fully encrypted and can only be de-encrypted by the application with your original pin and passphrase.