Security-first, offline-only password vault for Android.
VeilVault stores your vault locally on your device — no accounts, no cloud sync, no servers. Everything happens on-device, by design.
Control stays where it belongs — with you.
No accounts. No cloud. No background syncing.
What VeilVault Does
VeilVault keeps secrets local.
No accounts. No sync. No background traffic.
Clear boundaries, explicit behavior, and predictable failure modes.
- Stores vault data locally on the device
- Works fully offline
- Protects access with a master password you control
- Supports autofill with explicit user authentication
- Offers safety tools like Insights, PanicHold, and an optional Decoy Vault
You own your data — and your responsibility.
What VeilVault Does Not Do
VeilVault does not pretend convenience is free.
It avoids hidden systems that expand your exposure over time.
- No cloud sync or online backups
- No accounts
- No “forgot password” or recovery flows
- No web vault or browser extensions
- No trackers or analytics
If you forget your master password, the vault cannot be recovered.
Features
Autofill (optional)
Autofill reduces manual password handling without turning VeilVault into a background service. It must be explicitly enabled, and authentication is always required before credentials are provided.
Insights (local safety overview)
A local overview that highlights weak or reused credentials and basic vault stats. No tracking, no telemetry — results reflect your current vault only.
Decoy Vault (optional)
An alternate unlock path that presents non-sensitive data in coercive or high-pressure situations. It’s risk reduction, not magical deniability.
PanicHold + Emergency Wipe
PanicHold obscures content and locks the vault fast. Emergency wipe permanently deletes local vault data — irreversible by design.
Security Model
Security Boundaries
VeilVault is designed for clear boundaries — not vague promises.
- Offline-only operation (no servers to trust)
- Encrypted vault with integrity enforcement (tampering causes unlock to fail)
- No partial unlock states or degraded modes
- Keys exist only in memory while unlocked
- Optional biometrics (convenience only, never a replacement)
VeilVault does not claim to protect against compromised or rooted devices,
kernel-level malware, or advanced hardware extraction.
Security is strongest when expectations are explicit.
Security model →
Threat model →
Limitations →
Privacy & permissions →
Why VeilVault draws hard lines
Most password managers add “just one more convenience” until
the product turns into a system you
have to trust.
VeilVault goes the other direction:
fewer moving parts, fewer places to leak.
- No accounts so identity and access can’t be reset remotely
- No cloud sync so there’s no central target and no background traffic
- No recovery because recovery always means a second key you don’t control
- No web vault because browser surfaces expand your attack area fast
- Explicit failure: if something is wrong, unlock fails — it doesn’t “degrade”
This is the trade: you get stronger boundaries and less exposure — and you take responsibility for your master password and backups (exports).
Security-first means saying “no” by default.
Who VeilVault Is For
VeilVault is for people who prefer control over convenience theater.
- People who want an offline password manager
- People who prefer explicit control over “magic convenience”
- People comfortable managing their own backups (exports/imports)
Not for you if…
- You need sync across devices
- You expect password recovery
- You want web access or browser extensions
VeilVault is opinionated on purpose.
Pricing
Try VeilVault first.
When the trial ends, unlock the full app with a one-time purchase — or export your data.
- No subscriptions
- One-time purchase (lifetime)
- Your vault stays local either way
No account required. No “free” product funded by surveillance.
Download
VeilVault is an Android app. Download it from Google Play.
Prefer reading first? Start with the documentation.