The privacy-first password manager that keeps your data exactly where it belongs — on your device. Zero backend. No telemetry. Every line auditable.
Why KeyArmor
Most password managers store your data on their servers. KeyArmor doesn't have servers. That's not a limitation — it's the entire point.
All your data lives on your device, encrypted with AES-256-GCM. There are no KeyArmor servers to breach. When you optionally enable Google Drive backup, your vault is encrypted with an additional password you control before it ever leaves your device — Google receives a file it cannot read. Your data, your rules, always.
Passwords, credit cards, bank accounts, crypto wallets, secure notes, two-factor codes, passkeys, identity documents, vehicles and custom entries with any fields you need — all secured, organized and accessible from a single place. Plus proactive breach monitoring to tell you when a password has been exposed, before attackers use it.
KeyArmor's source code is publicly available for security inspection. You don't have to take our word for it — you can verify it yourself. No proprietary black boxes. No hidden telemetry. No surprises.
Features
Powerful features built with privacy at the core — not bolted on as an afterthought.
Store logins with username, password, URL and notes. One-tap copy for any field. Sensitive fields hidden by default, revealed on demand.
Built-in 2FA/TOTP code generation. Scan QR codes to register secrets. Time-based codes generated fully offline, on-device.
Store card numbers, expiry dates, CVV and billing info with an integrated phone dialer shortcut for quick bank contact.
Dedicated fields for bank name, account type, IBAN, routing number and more. All encrypted at rest.
Store seed phrases, wallet addresses and private keys. Live balance for BTC, ETH, SOL, BNB, MATIC, LTC, DOGE — no API key required.
Encrypted free-text notes for recovery codes, licenses, private thoughts. Fully local, fully encrypted.
Create entries with any fields you need — text, passwords, phone numbers. Define your own structure for any credential type.
Store and manage your FIDO2 passkeys alongside all your other credentials. View domain, account, creation date and last used. Link each passkey to its password entry for full context in one place.
Attach up to 5 files per entry (max 5 MB each), all encrypted with AES-256-GCM on-device. Images, PDFs and any file type.
Scores your vault health 0–100 and surfaces Top 5 urgent issues: weak, duplicate, breached, pattern-based or expiring passwords.
Checks passwords against 14B+ breached credentials via haveibeenpwned.com. Only the first 5 SHA-1 chars sent — match evaluated locally.
Decoy PIN that instantly wipes or hides sensitive vault data under duress. Configurable wipe scope for emergency protection.
Mark entries as travel-safe. Activate Travel Mode to hide everything else — border searches see only what you allow.
Share vault entries directly via QR code or encrypted text. No cloud, no middleman — end-to-end encrypted, peer to peer.
Manual on demand or automatic when you close the app. Available for both Premium and Lifetime. Vault encrypted before leaving your device — Google can't read it.
Fingerprint and face unlock via Android BiometricPrompt. KeyArmor never stores biometric data — handled entirely by the device OS.
Require biometric re-auth before revealing sensitive fields. Per-session or per-access mode — configurable timeout.
Detects login fields in any app or browser and suggests credentials instantly. Enable once in Settings → Autofill.
Vault locks after configurable idle timeout: immediately, 30 s, 1–30 min, or never. Timer resets with any interaction.
Copied sensitive fields are auto-wiped after 15–120 seconds. Prevents clipboard sniffing by other apps.
Local encrypted history of previous passwords per entry. Never transmitted. Recover past passwords when needed.
Get notified before passwords expire. One or multiple warning thresholds — 1, 3, 7, 14 or 30 days before expiry, per entry.
Automatic alerts for expiring passwords and detected breaches. Stored locally, auto-deleted after 30 days, dismissible with a swipe.
Real-time search across every section from a single screen. Results update instantly matching titles, usernames, URLs and custom fields.
Organize with 8 categories and unlimited custom tags. Unlike rigid folder hierarchies — where each entry lives in exactly one place — KeyArmor's multi-tag system lets any entry belong to multiple contexts at once. Tag a credential as work, client-X and critical simultaneously and find it by any of those criteria. Filter and search instantly. Assign in bulk with a single action.
Pin up to 3 entries to always appear at the top of your vault. One tap to your most critical credentials without scrolling.
Mark any entry as a favorite. Access all starred entries instantly from the dedicated Favorites section — always one tap away.
Select multiple entries and apply actions at once — assign tags, change category, archive, or delete across vault, archive and trash.
Archive entries you no longer use — never auto-deleted. Trash allows final review before permanent deletion.
Classic, pronounceable and passphrase modes. Configure length, symbols, digits. Ambiguous characters excluded on demand.
Import from other managers (CSV, JSON). Export your full vault. Duplicate detection ensures re-importing never creates redundant entries.
10 themes: White & Dark free, 8 premium (Lila, Yellow, Mint, Cream, Sky, Rose, Navy, Wine). 13 WCAG accent colors (Premium). Follows system dark/light mode automatically.
2×1 Android widget showing total entry count. Auto-updates on vault changes. Supports light/dark mode. Tap to open vault.
Full UI and legal docs in English, Spanish, French, German, Italian, Portuguese, Polish, Russian, Japanese, Chinese and more.
Store passports, national IDs, driver's licenses and any government-issued document with number, expiry and issuing country — encrypted on-device.
Dedicated section for vehicle records — make, model, VIN, license plate, insurance policy and registration details. All secured in your vault.
Set one-off or recurring reminders tied to any vault entry — renewal dates, scheduled password changes, upcoming expirations. Delivered locally, never synced to a server.
Designate up to 3 trusted heirs who gain vault access only if you remain inactive for a configurable period (6, 9 or 12 months). A 7-day grace window lets you cancel any time just by opening the app. Fully automatic, fully private — no KeyArmor servers involved.
Browse a full history of vault restore points — local and Google Drive — and go back to any previous state. Restore points are created automatically on every backup and can be previewed before restoring. Never lose data due to an accidental change.
Create up to 5 independent vaults in a single app — separate work from personal, keep a vault per family member, or isolate high-sensitivity credentials. Each vault is encrypted independently. Free plan includes 1 vault.
App Screenshots
A modern, polished interface designed for daily use — beautiful and fast.
Security Architecture
We don't ask you to trust us. We built KeyArmor so you don't have to.
Every entry, attachment and backup is encrypted with AES-256-GCM — the same standard used by governments and financial institutions worldwide.
Encryption keys are stored in hardware-backed secure storage, isolated from the OS and inaccessible to other apps — even with root access.
Your master password is never stored. It's used to derive the vault key via PBKDF2. Without your password, the vault is mathematically unbreakable.
We can't reset your password because we don't know it. We can't access your data because we don't have it. This is a feature, not a bug.
KeyArmor sends only the first 5 characters of a SHA-1 hash to Have I Been Pwned. The full match is evaluated locally. Responses are padded with fake hashes — 100% private.
Pricing
The core vault is free, forever. No trials. No feature walls. No gotchas.
Upgrade only when you want the extras.
FAQ
Add-Padding header, which instructs HIBP to pad every response with random fake hashes, making all responses look identical in size so even traffic analysis reveals nothing.Get KeyArmor
Free forever. No account required. No email. No tracking. Just install and go.
Download on Google PlayNo personal data collected during installation or use.