Gumlock: Password Manager

Gumlock is a password manager that keeps your passwords on your Android phone — not on our servers, because we don't have any.

NO ACCOUNT. NO SERVER.
There is nothing to sign up for. Your vault is encrypted on your device with a master password that only you know, and nothing leaves your device unless you choose to sync, back it up or share it. We can't see your passwords, and nobody can sell them.

BUILT FOR THE WHOLE FAMILY
Manage accounts for your partner, parents and kids in one vault. Give each item an owner, then filter the list by person in one tap.

FAST EVERY DAY
• Unlock with biometrics such as your fingerprint
• Autofill usernames and passwords in Chrome and other apps
• Save a new account when you sign in — Android asks, Gumlock keeps it encrypted
• Copy a username or password, or show it, straight from the list
• Copied passwords are cleared from the clipboard automatically
• Search by site, username or owner, and pin favorites to the top
• Usernames you already use are suggested as you type
• Share an account with family through any app — you choose what to send and confirm with your fingerprint or screen lock

SECURITY FEATURES ARE ALWAYS FREE
Unlimited items, autofill, biometric unlock, encryption, encrypted backup and restore, and CSV export are free — forever. If you ever want to leave, export a CSV that Google Password Manager and other managers can import.

MOVING FROM OR TO AN IPHONE
Gumlock for iPhone uses the same backup file format, so you can move your vault between iPhone and Android with an encrypted backup file.

GUMLOCK PRO — ONE-TIME PURCHASE, NOT A SUBSCRIPTION
• Google Drive sync between your devices (only encrypted data goes to a hidden app folder in your own Google Drive)
• Automatic backups to a folder you choose
• Attachments such as photos of ID cards
• Multiple vaults, each with its own master password
• Custom fields
• Home screen widget

HOW IT PROTECTS YOU
• AES-256-GCM encryption; the key is derived from your master password with PBKDF2-SHA256 (600,000 iterations)
• Your master password is never stored. Decrypted data exists only in memory while the vault is open
• Locks when you leave the app, and after the time you choose
• Screenshots and the recent-apps preview are blocked
• No analytics, no ads, no tracking

IMPORTANT
If you forget your master password, your vault cannot be recovered — by anyone, including us. Keep it somewhere safe, and export an encrypted backup from time to time.

Available in English, Korean, German, Spanish and Japanese.