btw vault

btw vault is an offline-first, zero-knowledge personal cryptographic vault architected from the metal up for users who decline to trust remote third-party credential clouds.

Your passwords, payment cards, sensitive notes, and dynamic schemas are
encrypted directly in an on-device SQLCipher database using native C++ JSI bindings. Your Master Key is stretched in-memory via Argon2id and is never written unencrypted to disk.

KEY FEATURES

Zero-Knowledge & Offline-First
• No account creation required. No remote servers.
• 0 telemetry SDKs, 0 user tracking, and 0 ads.
• Your data lives solely on your device sandbox.

Hardened Cryptographic Architecture
• Storage Cipher: SQLCipher AES-256 in CBC mode with 4096-byte page HMAC
integrity checks. • Key Stretching: Argon2id memory-hard derivation (4MB RAM cost, 2 iterations,
256-bit cryptographically secure salt). • Memory Evacuation: Decryption keys are wiped immediately when backgrounded or
locked.

Complete Vault Management
• Logins & Credentials: Securely store usernames, passwords, URLs, and notes.
• Payment Cards: Store card numbers, expiry dates, and CVVs with masked field
toggles. • Secure Notes: Keep private keys, recovery phrases, and sensitive notes
protected. • Custom Categories & Schemas: Create dynamic schemas with custom text, secret,
email, or URL fields. • Password Generator: Generate cryptographically strong random passwords with
custom symbols and length.

Seamless Security Controls
• Biometric Quick Unlock: Unlock instantly via Fingerprint or Biometrics stored
safely in hardware Android Keystore. • Auto-Lock & Screen Shield: Automatically locks on app inactivity or
backgrounding, with optional screen-recording / screenshot protection. • Auto-Clearing Clipboard: Copied passwords automatically wipe from your
clipboard after 30 seconds.

Portable Backups & Client-Side Cloud Continuity
• Encrypted Local Backups: Export and import portable, password-protected .btw-
vault backup files directly to your device storage. • Optional Google Drive Sync: Back up your encrypted vault container directly to
your personal Google Drive app folder using client-side end-to-end encryption. No third-party servers ever touch your files.

Engineered for personal privacy and local digital sovereignty.