Vaultis
Vaultis is a fully offline password manager for Android that operates without the INTERNET permission, ensuring credentials never leave the device. It uses AES-256-GCM encryption with Argon2id key derivation and offers biometric unlock via Android Keystore. The app is a one-time purchase with no subscriptions, ads, or telemetry.
- Cybersecurity
- Applications
- Software Only
Funding
Founders
Founder details are not available yet.
Product
Problem
Cloud-based password managers store user credentials on remote servers, creating a large attack surface for data breaches and requiring user trust in third-party infrastructure. Password vaults that rely on network synchronization introduce risks of interception and exposure, and conventional managers often monetize user data through tracking or telemetry, undermining user privacy.
Solution
Vaultis provides a fully offline password manager for Android that ensures sensitive credential data never leaves the device. The app is built without the Android INTERNET permission, meaning the operating system physically prevents any network connection, eliminating server breach, account leak, or sync interception risks. All entries are encrypted locally using AES-256-GCM authenticated encryption, with keys derived from the user's master password via the memory-hard Argon2id key derivation function, making brute-force attacks deliberately expensive. Biometric unlock leverages Android Keystore-bound cryptographic keys, keeping biometric data confined to the device's secure hardware. The vault supports logins, cards, and notes, with instant search, one-screen entry capture, and live password strength scoring on every entry. Users can generate random passwords or passphrases up to 64 characters, with clipboard auto-wipe for extra security.
Target Audience
Primary users are Android owners who want maximum security and privacy for their credentials, particularly security-conscious individuals who distrust cloud services and require a zero-data-exposure password management solution.
Features
- Fully offline operation with no Android INTERNET permission, preventing any network transmission of data
- AES-256-GCM authenticated encryption for all vault entries with tampering detection
- Argon2id memory-hard key derivation to protect the master password against brute-force attacks
- Biometric unlock using Android Keystore-bound keys confined to the device's secure hardware
- Built-in password generator with adjustable length, character sets, and passphrase mode up to 64 characters
- Live password strength scoring with weak-credential flags on every entry
- Privacy defaults including screenshot blocking, hiding from recents, auto-lock, and timed clipboard clearing
- Encrypted backup export protected by a user-chosen passphrase