I built an Android password manager with a deliberate constraint: your PIN is never stored anywhere – not on device, not on any server, not in backups. If you forget it, your data is gone.
Most password managers have recovery mechanisms. Those mechanisms are attack surfaces. I wanted to see what a password manager looks like when you eliminate that entirely.
How it works:
- Your PIN derives the AES-256 encryption key
- Secrets are encrypted at rest on your device
- Optional Google Drive backup (uploaded in it's encrypted form – Google only sees ciphertext)
- System autofill service for apps/browsers
- TOTP authenticator built-in
- Export to password-protected ZIP if you want to leave
What you give up:
- No recovery if you forget your PIN
- No real-time multi-device sync
- No web interface
The idea isn't that this is better for everyone. It's that for users who want verifiable privacy over convenience, the trade-off makes sense. You don't have to trust my privacy policy – you can verify that there's no recovery mechanism to exploit.
Free tier: 5 passwords. $1 one-time for unlimited.
I built an Android password manager with a deliberate constraint: your PIN is never stored anywhere – not on device, not on any server, not in backups. If you forget it, your data is gone.
Free tier: 5 passwords. $1 one-time for unlimited.