Kryptos - ID & Document Vault

Kryptos is a zero-knowledge personal vault for your most sensitive documents — passports, ID cards, driver's licences, payment cards, API keys, and private notes. Everything is encrypted on your device with AES-256. We never see your data, and we can't.

▸ ZERO-KNOWLEDGE BY DESIGN
Your vault lives in a SQLCipher (AES-256) database. The encryption key is held in the Android Keystore — hardware-backed on supported devices — and gated behind your biometric. There is no Kryptos server that holds your secrets. Even cloud backup uploads only opaque, encrypted bytes.

▸ NFC CHIP READING
Read electronic passports (ICAO 9303 ePassport via JMRTD) and contactless EMV payment cards directly through NFC. 100% accurate, fully offline. Most "vault" apps can't do this.

▸ SMART DOCUMENT SCANNING
Snap a passport, driver's licence, or ID. Google ML Kit's on-device OCR extracts the fields automatically, with locale-aware parsing for Malaysian and international formats. Camera frames never leave your phone.

▸ BEAUTIFUL HERO CARDS
Each document type gets its own purpose-built, high-fidelity card UI — passports, driver's licences, credit cards, IDs, notes, API keys, tax numbers.

▸ PRIVATE ENTRY SHARING
Need to send an entry to someone else using Kryptos? Show a share QR code and they can scan it into their own vault with the correct category and fields filled in. No Kryptos server in the middle.

▸ EXPIRY REMINDERS
Get notified before your passport, ID, or card expires. Scheduled offline via WorkManager — no cloud dependency.

▸ BIOMETRIC UNLOCK
Lock your vault behind Android Biometric (Fingerprint or Face Unlock), backed by hardware keystore.

▸ ENCRYPTED CLOUD BACKUP
Auto-backup your encrypted vault to your own Google Drive. Google Drive can only see encrypted bytes. Nobody but you can decrypt the backup.

▸ MULTI-ACCOUNT ISOLATION
Share one device with family? Each Google account on the device gets its own fully isolated, separately encrypted vault. They never see each other.

────────────────

FREE — UNLIMITED ENTRIES
Kryptos is free, with no entry limit and no subscription. The app is supported by occasional in-app ads displayed alongside your vault. Ads are served by Google AdMob and are NEVER personalised using the contents of your vault — your entries are encrypted on-device and the ad SDK has no access to them.

────────────────


────────────────

▸ ONE-OFF REMOVE ADS
Prefer an ad-free experience? Purchase the Remove Ads upgrade as a one-time, permanent in-app purchase. Once bought, all ads are hidden and your vault stays ad-free forever — no subscription, no recurring charges. The purchase is tied to your Google account, so it restores on any device.


WHY KRYPTOS
Most "secure" vaults are convenient because they hold your data on someone else's server. Kryptos picks the harder path: your data stays on your device, encrypted with a key only you control. The trade-off is that we can never reset your vault for you — but it also means no breach, leak, or subpoena exposes your secrets.

PERMISSIONS WE REQUEST
• Camera — to scan documents with OCR (on-device only)
• NFC — to read ePassports and EMV cards (on-device only)
• Biometric — to unlock your vault
• Internet — for Google Sign-In, Drive backup, and ad delivery
• Notifications — for expiry reminders

WE DO NOT
• Run a server that stores your vault contents
• Use your vault contents to personalise ads
• Sell or share your vault data with anyone
• Hold a copy of your encryption key

Built in Kuala Lumpur. Privacy policy: https://kryptos.faizalmzain.com/privacy.html

Recent changes:
Maintenance update: rebuilt with a newer Android toolchain (Kotlin 2.4, AGP 9.4) and patched a third-party security advisory in the shipped libraries. No functional changes.