Guide

Everything Sekuvo does, in the order you are likely to need it. Nothing here requires an account or an internet connection.

First run

On first launch you set a master password. Every secret you store is encrypted with a key derived from it, so it is the one thing Sekuvo cannot help you recover — write it somewhere safe before you go further.

Already have a backup from another phone? Tap “I have a backup — restore it” on the welcome screen. You still set a master password for this device first, then the file picker opens by itself and your entries come back.

If your phone has a fingerprint or face sensor, Sekuvo offers to use it right after setup. That is a convenience layer only: the master password always works, and it is the one that survives a factory reset.

What you can store

Four entry types cover most of what people keep in a vault:

• Account / Password — username, password, site or app.
• Everyday — name, phone, email, address. The things forms ask for constantly.
• Card — card number, expiry, CVV, IBAN.
• Secure note — free text, with subtypes for scripts, keys, recovery codes and config files.

Account and Everyday entries also take custom fields: any “name + value” pair you like. Custom fields are encrypted exactly like the built-in ones and appear everywhere the others do.

Using a secret without the clipboard

The clipboard is readable by other apps and is where secrets get stolen. Sekuvo gives you three ways to deliver a value straight to its destination instead. You can still copy — the clipboard is cleared within 45 seconds, or at the latest when you return to the app; while you are away Android lets no app clear it — but the three channels below are the reason the app exists.

Autofill (inside your phone)

Sekuvo can act as Android's autofill service, so sign-in and card forms offer your entries directly.

Turning it on: Sekuvo → Settings → Enable autofill → pick Sekuvo from the system list. The list has different names by device: on Samsung and Android 14+ it is Passwords, passkeys & autofill → Preferred service; on stock Android it is Autofill service.

After that, tapping a username, password or card field in any app shows your matching entries above the keyboard. If the vault is locked you get an unlock step first — while locked, the system is handed nothing at all.

Sekuvo Keyboard (inside your phone)

The keyboard add-on types stored values into any field, in any app, without a copy step.

Turning it on: Sekuvo → Settings → Enable the keyboard → switch it on in the system list, then pick “Sekuvo Keyboard” from the keyboard switcher whenever you need it.

Recently used entries sit on top and 🔍 searches titles, usernames and addresses (Turkish letters match their ASCII equivalents, so “sifre” finds “şifre”). While the vault is locked the keyboard shows only entries you marked for quick access — see below.

Typing into a computer over Bluetooth

Your phone can act as a Bluetooth keyboard and type a secret at your computer's cursor. Nothing is installed on the computer, it works on Windows, macOS and Linux, and the value never touches the clipboard or a network. Requires Android 9 or newer.

Step by step

1. In Sekuvo, open the entry and tap the 💻 icon next to the field you want typed. Keep this screen open — your phone only announces itself as a keyboard while it is.
2. On the computer, add the phone as a new Bluetooth device: Settings → Bluetooth & devices → Add device → Bluetooth on Windows, or System Settings → Bluetooth on macOS.
3. Confirm the pairing code on both sides.
4. Back on the phone, pick your computer from the list and wait for “Connected”.
5. Choose the computer's keyboard layout — not the phone's. The computer interprets the key codes, so a wrong layout silently turns characters like @ " ? into different ones.
6. Click into the field on the computer where the value should go.
7. Tap Type on the phone. After a three-second countdown — which exists so you can click into that field — the value is typed key by key.

Connected, but nothing is typed

Almost always the same cause: the computer paired with your phone as a phone at some earlier point, so it never enabled the keyboard (HID) service for it. The connection succeeds and the keystrokes go nowhere.

1. Remove the pairing on the computer (Remove device).
2. Remove it on the phone too (Forget in Bluetooth settings). Both sides matter.
3. Open the 💻 screen in Sekuvo and leave it open.
4. Pair again, starting from the computer.
5. To confirm on Windows: Device Manager → Human Interface Devices should now list a Bluetooth HID device.

On macOS, the first connection may open the Keyboard Setup Assistant, which asks you to press a key beside the shift key. Until that window is dismissed, macOS processes nothing — this is the usual “connected but silent” cause on a Mac.

Speed, and checking it

Keys are sent one at a time, so a long secret takes real time — the dialog shows an estimate. Three speeds are offered, and the safe one is the default on purpose. Before raising it, use ⏱ Speed test: it types ten identical space-separated blocks and reports measured characters per second. If even one block differs, that speed is not safe on this computer — drop one step.

The speed test doubles as a diagnostic: nothing typed at all means pairing, garbled characters mean the layout, a cut-off run means the speed.

While typing you get a progress bar and a Stop button. If the send queue stalls, Sekuvo retries with backoff and, if it still fails, stops and tells you at which character — a secret is never silently half-typed.

How locking works

The vault locks the moment the screen it is on goes dark — including folding a foldable shut. At that instant the key is wiped from memory; entry titles may still be listed, but nothing can be decrypted.

Leaving the app while the screen stays on does not lock it. That is deliberate: the app, the keyboard and autofill share one session, so switching to your browser to paste a password would otherwise lock you out mid-task.

Quick access — a deliberate trade

Entries you explicitly mark as “use on the keyboard without a password” are stored a second time, encrypted with a separate device key, so the keyboard can read them while the vault is locked.

The trade is stated plainly: those entries are protected by your phone's screen lock, not by your master password. Keep passwords out of it. The mark is off by default; the single exception is new Everyday entries, which start marked because names and phone numbers are what you want at hand — you can switch any of them off.

Backups and restoring

System backup (Google backup, device transfer) is deliberately disabled, so there is exactly one way your vault leaves the phone and it is a way you chose: Settings → Create encrypted backup.

You pick a backup password — make it different from your master password, because the backup password is the one that gets typed on computers. The result is a single .vaultbak file you save wherever you like: Drive, an SD card, a USB stick.

The file is device-independent: its own salt and key-derivation parameters live in its header. File plus backup password restores everything on any phone, even after a factory reset. Restore from Settings → Restore from backup, or from the welcome screen on a fresh install.

Restoring offers add to existing or replace all. Both are checked before anything is written — a wrong password fails at the authentication step, and nothing is deleted until the new data is verified.

Bringing secrets from a computer

Typing a long key into a phone by hand is where mistakes happen. Sekuvo takes them across as an encrypted envelope instead, in two forms: text you paste, or QR codes you scan.

On the phone: the ➕ button offers Import via QR and Import from text. QR import opens the camera; frames are decoded on the device, and multi-frame transfers show progress as they are collected.

The computer-side tool

The tool that builds those envelopes is a single HTML file, and it is deliberately a download, not a website. sekuvo.com never asks you for a secret; a page that did would be exactly what a phishing site looks like.

1. Open the project on GitHub and go to Releases.
2. Download aktar.html from the latest release.
3. Check its SHA-256 against the value published beside it: shasum -a 256 aktar.html on macOS or Linux, certutil -hashfile aktar.html SHA256 on Windows.
4. Open the file by double-clicking it. It runs from your disk — the address bar shows file://, not a website.
5. Paste your text, set a transfer password, and it produces the envelope as text or as QR codes.
6. On the phone, scan or paste, enter the same password, and choose add or replace.

All of the encryption happens inside your browser, on your machine. There is also vault-clip.py for the command line, which does the same from the clipboard or a file and can render the QR codes in a terminal.

If you would rather not use the tool

The envelope is an open format, not something only Sekuvo can make: PBKDF2-HMAC-SHA256 over 310,000 rounds, AES-256-GCM, wrapped in a small JSON object. You can build it yourself from about thirty lines you have read, and paste the result into Import from text — the app has no way to tell which tool produced it, and does not care.

The recipe is in the repository: docs/kendi-zarfini-uret.md (written in Turkish).

Usage log

Sekuvo records which field of which entry went where and when: to the clipboard, to a computer over Bluetooth (with the target device's name), or typed into an app from the keyboard. When a computer is compromised, this answers “what went there, what do I need to change”.

The log is encrypted with the same key as your entries and values are never written to it — only the type of event, the field name and the destination. Deleting an entry deletes its log, and you can clear the whole thing from Settings.

Password generator

Reachable from the 🎲 icon on the home screen, or beside the password field while editing an entry. It uses a cryptographic random source, produces 8–64 characters, lets you choose character classes, can drop look-alike characters, and shows the resulting entropy in bits.

← Back to sekuvo.com