Soligate Password Manager

Soligate keeps your logins encrypted on your own device. Your master password never leaves it, and the server only ever stores ciphertext it cannot read. Open the app with your fingerprint or face instead of typing your master password every time, and reach your vault even with no connection: it is cached on the device, encrypted, and syncs again when you are back online. - Store logins, and the two-factor codes that go with them - Unlock with fingerprint or face, on the devices you choose - Works offline, and syncs when the connection returns - Generate strong passwords wherever you need one - Search your whole vault, and copy what you need without revealing it - Locks itself after a period of inactivity How the encryption works: your master password is turned into a key on your device with Argon2id, and every field is sealed with XChaCha20-Poly1305 before it is sent anywhere. The key never leaves the device, so nobody at Soligate can read your vault, and neither can anyone who takes the server. Soligate is free. There are no paid plans and no in-app purchases. An account at soligate.com is required. Browser extensions and desktop apps are available separately, and everything syncs to the same vault. Sign in automatically (optional, off until you turn it on): after Soligate fills a login you chose, it can press that screen's sign-in button for you. This one feature uses Android's AccessibilityService API, and nothing else in Soligate does. You switch it on in Soligate (Settings › Security) and once in Android's accessibility settings; Soligate explains what the permission allows before sending you there. It acts only in the app you just filled, for five seconds and a single press, and does not read the screen at any other time. Nothing it sees is stored, logged or sent anywhere. If it cannot tell for certain which button signs you in, it presses nothing. Turn it off in either place and it stops.