Offline · Encrypted · Yours

Your passwords and documents, locked on your phone.

XVault keeps passwords, Aadhaar, PAN, cards and bank details in one encrypted vault that never goes online. No account, no cloud, no tracking.

Get it on Google Play See what it does

Android 8.0 and up · Free of ads

Everything worth protecting, in one place

Pick a ready-made template or build your own. Sensitive fields stay hidden until you choose to reveal them.

🔑 Logins🪪 Aadhaar🧾 PAN card💳 Cards 🏦 Bank accounts🛂 Passport🚗 Driving licence🗳️ Voter ID 📶 Wi-Fi🧩 Licence keys📝 Secure notes✨ Custom
🔓

Unlock your way

Master password, plus an optional PIN or fingerprint so you are not typing it every time.

⏱️

Auto-lock

Locks itself after 1 to 10 minutes away from the app, or immediately if you prefer.

🎲

Password generator

Strong random passwords or easy-to-type passphrases, with a live strength meter.

🩺

Vault health

Spot weak, reused and old passwords at a glance and fix them.

⏰

Expiry reminders

Get a nudge before your card, passport or licence runs out. Notifications never show item names.

📎

Attach scans

Keep photos of your documents next to the details, encrypted like everything else.

🔎

Search and organise

Favourites, tags, folders, filters and a 30-day trash so a slip is never final.

📋

Careful copying

One tap to copy. The clipboard clears itself after a delay you choose, and when you lock.

Private by design, not by promise

XVault has no internet permission at all, so it cannot send your data anywhere. You can check this in the app's permissions on Google Play or in Android settings.

  • AES-256-GCM encryption for every item and attachment, including titles. Nothing readable is stored on the phone.
  • Your master password is never stored. It unlocks a key using 600,000 rounds of key stretching.
  • PIN and fingerprint are protected by the Android Keystore. A PIN is erased after 5 wrong tries.
  • Screenshots blocked by default, and contents hidden in the recent-apps view.
  • Lockout after wrong passwords, with an optional wipe after too many failures.
  • No accounts, ads, analytics or trackers. There is nothing to sign up for and nothing collected.

Back up to Google Drive, still encrypted

Export an encrypted backup file with its own password, and save it wherever you like, including Google Drive. Google only ever stores ciphertext. Restore it on a new phone in a few taps.

  1. Export
    Settings → Export encrypted backup, and choose a backup password.
  2. Save
    Pick Google Drive (or any location) in Android's file picker.
  3. Restore
    On a new phone, choose Restore from backup and enter that password.

Questions

What if I forget my master password?

Your data cannot be recovered, because we never have your password or your key. Keep an encrypted backup and store your master password somewhere safe.

Does XVault need the internet?

No. It has no internet permission. Backups use Android's file picker, so Google Drive is handled by Google's own app, not by XVault.

Is my data sent to you?

No. We run no servers and receive no data. See the privacy policy for details.

Can I move over from another password manager?

If it can export a CSV file with name, username, password and website columns, XVault can import those as logins.

Is my data safe if my phone is lost?

Everything is encrypted and the vault auto-locks. Use a strong master password and a screen lock, and keep your backups current.