PocketVault is a strictly offline password manager for Android. Passwords, cards, secure notes, and TOTP codes stay encrypted on your device—without an account, a cloud, or a remote server.
A complete password manager designed around a simple boundary: your vault belongs on your device, under your control.
PocketVault has no account system, analytics SDK, advertising, telemetry, or remote backend.
AES-256-GCM-HKDF streaming encryption protects vault data, including attachments.
Keep the essentials together, organized and locally searchable.
Biometric convenience unlock, auto-lock, screenshot protection, and timed clipboard clearing help reduce routine exposure.
A random vault key encrypts your data. Your master password wraps that key, so changing the password is fast without compromising the encryption model.
PBKDF2-HMAC-SHA256 with 600,000 iterations for current vault writes.
Google Tink Streaming AEAD protects content and verifies integrity.
Android Keystore can unlock the vault locally; it never replaces your master password.
Combined with a random salt to derive a local key-encryption key.
NEVER PERSISTEDThe keyset is encrypted at rest and can be re-wrapped when your password changes.
PASSWORD-WRAPPEDIndependent encrypted data files and attachments remain portable and under your control.
LOCAL BY DEFAULT
Thoughtful details make PocketVault useful every day, while sensitive values stay outside search indexes and remote systems.
Generate strong credentials with configurable rules, then organize them with categories and custom fields.
Scan QR codes locally or add entries manually, with secrets kept inside the encrypted vault.
Export a portable backup to a destination you choose—PocketVault never chooses a cloud for you.
Available in English, Simplified Chinese, Spanish, Hindi, Korean, Portuguese, and Vietnamese.
Review the implementation, security model, release process, and known limitations on GitHub.
Download PocketVault for Android or inspect every design decision in the source.
