PLocker - Password Manager

PLocker is your ultimate, 100% offline encrypted vault designed to keep your most sensitive data secure and private. With zero cloud storage, zero tracking, and zero internet dependency, your passwords, bank credentials, cards, and notes never leave your device.

Built with industry-leading security practices, PLocker offers peace of mind with absolute control over your digital identity.

Key Features:

- 100% Offline & Private: No accounts to create, no servers, and no cloud backups that can be hacked. Your data stays only on your physical device.

- Military-Grade Encryption: All sensitive fields are encrypted individually using AES-256-GCM.

- Strong Key Derivation: Key derived using Argon2id, the state-of-the-art key derivation function, and stored securely in Android Keystore / iOS Secure Enclave.

- Fully Encrypted Local Database: Utilizes SQLCipher to ensure the local SQLite database is completely encrypted at rest.

- Biometric Authentication: Unlock your vault quickly and securely using fingerprint or face authentication.

- Offline Password Reset: Secure fallback using 2-of-6 custom security questions (hashed with bcrypt).

- Security Score Engine: Scans your database for weak or reused passwords and expired cards to calculate a real-time security score.

- Secure Backups (.plk): Export compressed and encrypted backups protected by a custom Backup PIN. Share or store it wherever you like.

- Clipboard Auto-Clear: Sensitive data copied to the clipboard is automatically wiped after 30 seconds for protection against clipboard snooping.

- Screen Security (FLAG_SECURE): Prevents screenshots and screen recordings of the app.

- Auto-Lock Inactivity Timeout: Automatically locks the app after a specified period of inactivity (30s, 1m, 5m, or custom).

- Wipe All Data: Delete all local data instantly with a single, master-password-verified command.

Who is PLocker for?

Anyone who wants absolute privacy and control over their passwords, login credentials, credit cards, bank accounts, government IDs, and confidential notes without trusting third-party cloud servers.