A password vault that can't read your passwords.
Keep your logins, cards, notes and Wi-Fi passwords in one place, locked with a master password only you know. It works offline, with optional encrypted sync to your other devices.
The app is ready; the download goes up here shortly.


Everything it does, in plain words.
A password vault that cannot read your passwords. Logins, cards and notes, with a built-in 2FA authenticator, offline by default.
Logins, payment cards, secure notes, identities and Wi-Fi, with tags, favourites and search. Bring your passwords over from the browser or manager you use now.
2FA codes built in
Keep your two-factor codes next to the passwords they protect, with a live countdown.
Security check-up
A health score, plus lists of weak, reused, old and breached passwords to fix.
Unlock with your fingerprint
The vault locks itself when you leave the app, copied passwords clear themselves, and screenshots are blocked.
characters
All a breach check sends. Your password never leaves the phone.
Free, no ads
Works offline.
See it in action.
Real screens from the app.




Install it in a minute.
Xypher isn't on the Play Store yet, so you install it straight from here.
Your phone saves the file like any other download.
Android asks once if your browser may install apps. Tap Settings, turn on "Allow from this source", then go back.
Open the downloaded file and tap Install. Xypher appears on your home screen.
Questions
Is it really free?
Yes. No ads, no subscription.
What if I forget my master password?
Nobody can reset it, not even me. That's what keeps the vault private. Export an encrypted backup from Settings and keep your master password somewhere safe.
Can I use it on my computer?
Yes. Turn on cloud sync in Settings and open the web vault in your browser. It is decrypted on your computer, never on the server.
Does it work on iPhone?
Not yet. Xypher is Android-only for now.
For developers
- Zero-knowledge: Argon2id (64 MiB) derives the key, AES-256-GCM seals the vault, and the server only ever stores ciphertext
- The breach scan sends 5 characters of a hash, never the password
Get Xypher.
Free, and made with care in Kolkata.
Download coming soon …