Sekuvo
English · Türkçe · Español · हिन्दी · العربية
Offline password vault for Android

Your secrets
never leave.

Sekuvo is your secure vault: passwords, cards and notes, encrypted on your phone with a key only your master password can derive. It has no server, no account, no sync — and no way to phone home.

Google Play listing is in preparation. Sekuvo is free and GPLv3 — the code is the proof.

Security model

Encryption you can audit, not believe.

Every sensitive field is sealed with AES-256-GCM. The key never touches a server because there is no server; it is derived on your phone, from your master password, every time you unlock.

Master password ─PBKDF2 · 310,000 rounds─▶ KEK ─AES-GCM wrap─▶ dataKey ─▶ AES-256-GCM on every entry

Locks when the screen sleeps

The key is wiped from memory the moment the screen goes dark — folding a foldable counts. One unlock serves the app, the keyboard and autofill together.

Backups that outlive the phone

One encrypted .vaultbak file, stored wherever you choose. File + backup password restores everything on any device — the recovery path is tested end to end.

No recovery backdoor

Forget the master password and the data is gone. That is the design: a door only you can open has no spare key under the mat.

Clipboard-free by design

Three ways out, all under your finger.

The clipboard is where secrets go to be stolen. Sekuvo types values straight to their destination instead.

Autofill

Android autofill service

Sign-in and card forms offer your entries directly. While locked, the system gets nothing — unlock first, then choose.

Keyboard

Sekuvo Keyboard

Switch to it in any app and type a stored secret into the field — searchable, recents on top, no copy step.

Bluetooth

Types into your computer

Your phone becomes a Bluetooth keyboard and types the secret at the computer's cursor. Nothing is installed on the computer.

Get Sekuvo

Free, open source, GPLv3.

Android app

The Google Play listing is in preparation. Until then you can build from source — the repository README covers it in two commands.

Computer-side tools

The QR transfer tools are downloads, not web pages: they run entirely on your machine, and this site never asks for a secret.

github.com → Releases · verify the published SHA-256