Password Pal: Offline Vault

Password Pal is a password manager that stays on your phone. There is no account to create, nothing to sign in to, and no server holding your data. The app does not even hold the internet permission, so it cannot send your vault anywhere. You can check that yourself: open App info, then Permissions. WHAT IT DOES Store logins, secure notes, payment cards and identity details in one encrypted vault. Find any of them by title, username or website. Generate strong passwords when you need a new one. Keep your two-factor codes in the same place. HOW YOUR VAULT IS PROTECTED Every item is encrypted with AES-256-GCM before it is written to storage. The key comes from your master password through Argon2id, using 64 MB of memory and three passes, so guessing attempts are slow and expensive. Only an item's id and its timestamps sit outside the encrypted blob. Titles, usernames and passwords are all inside it. Your master password is never stored. Not on a server, because there is no server, and not on the phone either. You can change your master password at any time. Every item is re-encrypted with the new key in one step, so the vault is never left half-converted. UNLOCK THE WAY YOU WANT Unlock with your master password, or turn on biometric unlock and use your fingerprint or face. Turning biometric unlock off erases the stored key straight away. The vault locks itself when you leave the app. Choose immediately, or after 15 seconds, 30 seconds, 1 minute or 5 minutes. Repeated wrong master passwords slow the next attempt down, and that delay survives a restart. Screenshots, screen recording and the recent apps preview are blocked by default, so the vault does not appear in the app switcher. You can turn that off if you need to. BACKUPS YOU CONTROL Export your whole vault to a single encrypted file, protected by a passphrase you choose. You pick where it is saved. Restoring shows you exactly how many items will be added and how many will be replaced before anything is written. Android cloud backup and device-to-device transfer are switched off for this app, so your vault is never copied off the phone behind your back. That also means the backup file is yours to keep safe. MOVING IN FROM ANOTHER MANAGER Import a CSV export from Bitwarden, LastPass, 1Password, Dashlane, Enpass or Chrome. Password Pal recognises the column layouts these apps produce, shows you what it found, and reminds you to delete the CSV afterwards, because that file holds your passwords in plain text. STRONG PASSWORDS, HONEST FEEDBACK The generator uses your device's cryptographic random source and tells you how many bits of randomness went into each password. Passphrase mode draws words from a list of more than three thousand, so a short phrase is still hard to guess. The strength meter recognises common passwords, keyboard runs and repetition instead of just counting character types, so "Password1!" is rated for what it is. TWO-FACTOR CODES Add a code by scanning its QR code with the camera or by typing the secret. Scanning happens entirely on the device. NO TRACKING No analytics. No crash reporting. No advertising. No third-party SDK that could carry your data anywhere. Nothing you type is written to a log. WHAT PASSWORD PAL DOES NOT DO YET It does not fill logins in other apps or in your browser. It does not sync between devices. It does not store passkeys. If you need any of those today, a different app will serve you better, and we would rather tell you now than after you install. PERMISSIONS Biometric, so you can unlock with your fingerprint or face. Camera, used only while the two-factor scanner is open. That is all. IF YOU FORGET YOUR MASTER PASSWORD The vault cannot be opened. There is no recovery code and no reset, because nothing outside your phone holds the key. Keep an encrypted backup and remember its passphrase.