Kryptos - Private Vault

Kryptos is a zero-knowledge personal vault for your most sensitive documents — passports, ID cards, driver's licences, payment cards, API keys, and private notes. Everything is encrypted on your device with AES-256. You can share entries with another Kryptos user by QR when you choose to. We never see your data, and we can't.

▸ ZERO-KNOWLEDGE BY DESIGN

Your vault is stored in a SQLCipher (AES-256) database. The encryption key lives in the Android Keystore — hardware-backed on supported devices — and is gated behind your biometric. There is no Kryptos server that holds your secrets. Even cloud backup uploads only opaque, encrypted bytes.

▸ SMART DOCUMENT SCANNING

Snap a passport, a driver's licence, or an ID. Google ML Kit's on-device OCR extracts the fields automatically, with locale-aware parsing for Malaysian and international formats. Camera frames never leave your phone.

▸ NFC CHIP READING

Read electronic passports (ICAO 9303 ePassport via JMRTD) and contactless EMV payment cards directly through NFC. Useful, fast, fully offline.

▸ BEAUTIFUL HERO CARDS

Each document type gets its own purpose-built, high-fidelity card UI — passports, driver's licences, credit cards, IDs, notes, API keys, tax numbers.

▸ PRIVATE ENTRY SHARING

Need to send an entry to someone else using Kryptos? Show a share QR code and they can scan it into their own vault with the correct category and fields filled in. It works across Android and iOS, without a Kryptos server in the middle.

▸ EXPIRY REMINDERS

Get notified before your passport, ID, or card expires. Scheduled offline via WorkManager — no cloud dependency.

▸ BIOMETRIC UNLOCK

Lock your vault behind Android Biometric (Fingerprint or Face Unlock), backed by hardware keystore.

▸ ENCRYPTED CLOUD BACKUP

Auto-backup your encrypted vault to your own Google Drive:

• Free: hidden Drive AppData folder

• Pro: a visible "KryptosBackups" folder, easier to manage and copy off-device

Google Drive can only see encrypted bytes. Nobody but you can decrypt the backup.

▸ MULTI-ACCOUNT ISOLATION

Share one device with family? Each Google account on the device gets its own fully isolated, separately encrypted vault. They never see each other.

────────────────

PRICING — SIMPLE & FAIR

• Free: store up to 10 entries, full features, no ads.

• Kryptos Pro: $1.99 one-time. Unlimited entries, visible Drive backup, priority support, and all future Pro features included.

No subscriptions. No recurring fees. Pay once, own it forever.

────────────────

WHY KRYPTOS

Most "secure" vaults are convenient because they hold your data on someone else's server. Kryptos picks the harder path: your data stays on your device, encrypted with a key only you control. The trade-off is that we can never reset your vault for you — but it also means no breach, leak, or subpoena exposes your secrets.

PERMISSIONS WE REQUEST

• Camera — to scan documents with OCR (on-device only)

• NFC — to read ePassports and EMV cards (on-device only)

• Biometric — to unlock your vault

• Internet — only for Google Sign-In, Drive backup, Play purchase verification

• Notifications — for expiry reminders

WE DO NOT

• Run a server that stores your vault contents

• Show ads or embed advertising SDKs

• Sell or share your data

• Hold a copy of your encryption key

Privacy policy: https://kryptos.faizalmzain.com/privacy.html