Passwords encrypted, with no dependency on the internet
- Challenge
- Storing credentials without the access depending on someone else’s server, or on having a connection.
- Technical decision
- Derive the key from the master password with Argon2id and encrypt the vault with AES-256-GCM, which also detects any modification. Biometrics unlock it; they do not replace the encryption.
- Transferable
- On-device encryption when the data cannot leave the device.
- Offline-first password manager
- Flutter and Dart, for Android and Windows
- Argon2id to derive the key; AES-256-GCM for the vault
- Biometric unlock on Android; optional Windows Hello
- Public code and releases
- No external cryptographic audit
Have a similar case? Let’s talk