Vault - Offline Passwords

Every password encrypted on your phone, behind your fingerprint. No account to create, no cloud to trust, nothing reported back. Open source and auditable.

Vault keeps your passwords on your phone, encrypted, and nowhere else.

There is no account to create and no server to sign in to. Nothing is uploaded, nothing is synced, and nothing is measured. The app makes no network requests of its own, so there is simply no channel through which your passwords could leave the device.

ENCRYPTED AS ONE SEALED VAULT Your entries are encrypted together with AES-256-GCM rather than field by field, so the stored file does not even reveal which services you hold accounts with. The 256-bit key is generated on your device and kept in the operating system keychain, marked available only while the device is unlocked and never synchronised elsewhere.

LOCKED BEHIND YOUR FINGERPRINT Face ID, Touch ID or your device passcode opens the vault. The decrypted contents live only in memory, and are dropped the moment the app locks. Vault re-locks itself after you have been away for a while — you choose how long.

COPIES THAT CLEAN UP AFTER THEMSELVES Tap an entry to copy its password. The row itself becomes the receipt, counting down until the clipboard is wiped, so an accidental copy is visible and self-healing rather than silent. Vault only clears the clipboard if the contents are still what it put there, so it will never wipe something you copied yourself.

PASSWORDS WORTH USING The generator draws from a character set with the look-alikes removed, so a generated password can be read off the screen and typed elsewhere without ambiguity. Type your own instead and Vault tells you the truth about it — characters, bits of entropy, and an honest verdict.

FAST TO FILE, FAST TO FIND Search runs as you type, across names, usernames and addresses, with favourites pinned and the rest ordered by what you reached for last. Search for something you have not saved yet and the app offers to create it, with the name already filled in.

BACKUPS YOU CONTROL Export an encrypted backup sealed with a passphrase you choose. Your device key is never included, so the file is useless without it. Where you keep that file is entirely your decision. Restoring merges rather than overwrites, so bringing back an old backup never silently discards newer entries.

BUILT TO BE CHECKED A password manager asks for a great deal of trust. The complete source is public at github.com/haidang128/passwordVault, so the claims on this page can be verified rather than taken on faith.

No ads. No trackers. No analytics. No subscription.