Locks when the screen sleeps
The key is wiped from memory the moment the screen goes dark — folding a foldable counts. One unlock serves the app, the keyboard and autofill together.
English
Offline password vault for Android
Your secrets
Your secrets
never leave.
Sekuvo is your secure vault: passwords, cards and notes, encrypted on your phone with a key only your master password can derive. It has no server, no account, no sync — and no way to phone home.
Google Play listing is in preparation. Sekuvo is free and GPLv3 — the code is the proof.
Every password, key and card number on this screen is generated at random in this page — none of it is real, and none of it leaves your browser.
Encryption you can audit, not believe.
Every sensitive field is sealed with AES-256-GCM. The key never touches a server because there is no server; it is derived on your phone, from your master password, every time you unlock.
AndroidManifest.xml — every permission it has
<uses-permission android:name="…USE_BIOMETRIC" />
<uses-permission android:name="…CAMERA" />
<uses-permission android:name="…VIBRATE" />
<uses-permission android:name="…BLUETOOTH_CONNECT" />
$ grep INTERNET AndroidManifest.xml
(no matches — the permission does not exist)
Master password ─PBKDF2 · 310,000 rounds─▶ KEK ─AES-GCM wrap─▶ dataKey ─▶ AES-256-GCM on every entry
Backups that outlive the phone
One encrypted .vaultbak file, stored wherever you choose. File + backup password restores everything on any device — the recovery path is tested end to end.
No recovery backdoor
Forget the master password and the data is gone. That is the design: a door only you can open has no spare key under the mat.
Three ways out, all under your finger.
The clipboard is where secrets go to be stolen. Sekuvo types values straight to their destination instead.
Autofill
Android autofill service
Sign-in and card forms offer your entries directly. While locked, the system gets nothing — unlock first, then choose.
Keyboard
Sekuvo Keyboard
Switch to it in any app and type a stored secret into the field — searchable, recents on top, no copy step.
Bluetooth
Types into your computer
Your phone becomes a Bluetooth keyboard and types the secret at the computer's cursor. Nothing is installed on the computer.
Long secrets aren't typed by hand.
Move them by QR.
SSH keys, .env files, recovery codes… aktar.html encrypts the secret on your computer and Sekuvo reads it with the camera. No server, no account, no clipboard in between — only light travelling from a screen to a lens.
Download and verify
aktar.html is a single HTML file. Download it, compare its SHA-256 with the value below, and open it from your own disk.
Encrypt on the computer
Paste the secret and choose a transfer password. Encryption runs inside the browser, on your machine; the envelope is drawn on screen as QR codes.
Scan with the phone
In Sekuvo: ➕ → Import via QR. Scan the frames, enter the same password, and the entry lands in your vault.
Download aktar.html
SHA-256 · v1.0.0
85ee1729fda96072b36303074f21a170d5361c0577a920ef631bd6884d5b653dHow do I verify it?
Run the command for your system in a terminal; the output must match the value above exactly. The same value is published in the GitHub release notes. You can also keep it in Sekuvo as a Tool anchor (the fingerprint button on the home screen) and compare against your phone the next time you download.
# macOS / Linux
shasum -a 256 aktar.html
# Windows (PowerShell / cmd)
certutil -hashfile aktar.html SHA256
A download, not a web page: the address bar shows file://. sekuvo.com never asks you for a secret.
Free, open source, GPLv3.
Android app
The Google Play listing is in preparation. Until then you can build from source — the repository README covers it in two commands.
Computer-side tools
The computer-side tool is a single HTML file — aktar.html — and it is a download, not a web page: it runs entirely on your machine, and this site never asks you for a secret.
github.com → Releases · verify the published SHA-256