Your Private, Encrypted, Offline Vault
Military-grade password management that never leaves your device. Zero accounts, zero tracking, zero cloud. Just you and your secrets.

100% offline. Your vault is created on mobile and imported here via an encrypted .solidpass backup.
SolidPass is built from the ground up with an unwavering commitment to your privacy. We operate on a zero-cloud, zero-trust architecture. We do not collect, store, or see your data. Because the application runs 100% offline, there are no remote servers, databases, analytics, or tracking SDKs. You are the sole custodian of your digital vault.
No accounts. No servers. No internet required. Everything happens on your device, in your hands. Your data never leaves unless you choose to export it.
AES-256-GCM encryption with unique initialization vectors for every item. Master passwords are never stored—instead, they're converted into cryptographic keys using Argon2id, a memory-hard algorithm built to resist GPU and ASIC attacks.
Native apps for iOS, Android, macOS, Windows, and Linux. Synced locally across all your devices via encrypted backups.
Your master password is never saved. Instead, we derive a Key Encryption Key (KEK) using Argon2id (RFC 9106) — a memory-hard function that makes brute-forcing with GPUs or specialized hardware prohibitively expensive — with a cryptographically random 32-byte salt.
Every password, credit card, account, key, and note is encrypted with AES-256-GCM, using unique 12-byte initialization vectors (IVs) and authenticated tags for integrity. Item metadata — titles, types, tags, and attachment names — is encrypted too, so even a stolen database or backup reveals nothing about what you store.
All sensitive buffers, password inputs, and derived keys are explicitly wiped from memory immediately after use to prevent memory-scraping attacks.
Optional biometric unlock uses your device's native secure enclave (iOS Keychain or Android Keystore). Your fingerprint or face data never leaves your device.
Automatic session locks on app backgrounding. Customizable inactivity timeouts wipe memory buffers and force re-authentication.
Export fully encrypted vault backups (.solidpass files) — including your items, file attachments, and scanned documents — signed with SHA-256 checksums for integrity. Backups require your master password to restore.
No cloud, no tracking, no data mining. Just pure, local encryption. Your digital autonomy restored.
Military-grade cryptography, memory zeroization, and biometric authentication for the discerning security expert.
Simple, intuitive interface that protects your digital life without requiring you to understand the underlying cryptography.