Zero-knowledge encryption
Your data is encrypted locally with AES-256. Android uses SQLCipher and Android Keystore; the upcoming iOS version will use CryptoKit AES-GCM with keys held in the iOS Keychain.
Zero-knowledge · On-device encryption
Your most private documents,
Your most private documents,
locked down by design.
Kryptos is a personal vault for Android, with iOS coming soon, that keeps passports, IDs, payment cards, API keys, and private notes encrypted on your device. We never see your data — only you can.
Built on privacy-first platform technology
SQLCipher
CryptoKit
iOS Keychain
Google ML Kit
VisionKit
Jetpack Compose
Android Keystore
Features
One vault for everything that matters.
Passports, IDs, cards, API keys, notes, tax numbers — captured intelligently and stored under encryption only you can unlock.
Smart document scanning
Snap a passport, driver's licence, ID card, or payment card. On-device OCR extracts fields automatically using Google ML Kit on Android, with VisionKit and Live Text planned for iOS.
QR and NFC capture
Import QR codes on both platforms and regenerate them later. Android also supports NFC reading for ePassports and EMV cards; iOS does not include NFC document reading.
Beautiful hero cards
Each document gets a high-fidelity, dedicated card UI — passports, licenses, credit cards, and more.
Encrypted cloud backup
Auto-backup encrypted vault blobs to Google Drive today, with iCloud support planned for iOS. Free uses hidden Drive AppData; Pro adds a visible "KryptosBackups" folder.
Expiry reminders
Get local reminders 30 days, 7 days, and 1 day before passports, cards, IDs, or licences expire — scheduled offline on your device.
Biometric unlock
Lock your vault behind Android biometrics today, with Face ID and Touch ID support planned for iOS.
Multi-account isolation
Sign in with Apple or Google. Each account gets its own separately encrypted vault, so entries never leak between profiles.
Android now · iOS soon
Same zero-knowledge vault, tuned for each platform.
Kryptos is available on Android today. The iOS version is coming soon with the same privacy model and native iPhone security features.
Android vault
- ✓ SQLCipher AES-256 database encryption
- ✓ Keys held in Android Keystore
- ✓ Google Sign-In account isolation
- ✓ Google Drive hidden AppData or visible Pro backup
- ✓ NFC reading for ePassports and EMV cards
iPhone vault
- ✓ CryptoKit AES-GCM 256-bit encryption
- ✓ Keychain key storage with ThisDeviceOnly protection
- ✓ Sign in with Apple or Google account isolation
- ✓ iCloud private CloudKit or Google Drive backup
- − No NFC document reading planned for iOS
Security
Designed so we never see your data.
Kryptos is built around a simple promise: your secrets stay on your device, encrypted with a key only you control.
- ✓ AES-256 encryption at rest
- ✓ Keys held in Android Keystore or iOS Keychain
- ✓ Biometric gate before any decrypt
- ✓ Encrypted blob backups — iCloud and Drive can't read them
- ✓ No analytics on your vault contents. Ever.
Zero-knowledge by default
Local-first · End-to-end encrypted backups
vault = AES256.open( data: "vault", key: SecureStore.key(account, biometric) ) // We never see your key. We never see your rows. backup = encrypt(vault) → cloud.upload()
Pricing
Free to use. Pro when you need more.
Free
$0up to 10 entries
- ✓ Store up to 10 entries
- ✓ OCR and QR scanning
- ✓ Biometric unlock
- ✓ iCloud or hidden Drive backup
- ✓ Expiry reminders
Pro
Kryptos Pro
$1.99one-time · no subscription
- ✓ Unlimited entries
- ✓ Everything in Free
- ✓ Backup to visible "KryptosBackups" folder
- ✓ Easier restore & portability
- ✓ Priority support
- ✓ All future Pro features included
Pay once. Yours forever. No recurring fees.
FAQ
Questions, answered.
Can the Kryptos team see my documents?
No. All data is encrypted locally on your device with a key stored in Android Keystore today, and the iOS Keychain in the upcoming iPhone version. We have no servers that hold your plaintext data.
How does backup work if it's zero-knowledge?
Kryptos encrypts your entire vault into an opaque blob and uploads it to your Google Drive today, with iCloud support planned for iOS. Cloud providers only see encrypted bytes.
What happens if I lose my phone?
Sign in with the same Apple or Google account on a new device, restore from your chosen backup, and re-authenticate with biometrics. Your vault is back — without anyone in between ever decrypting it.
Which documents support NFC?
On Android, modern electronic passports (ICAO 9303 ePassports via JMRTD) and contactless EMV payment cards can be read when supported by the document or card. The upcoming iOS version will not include NFC document reading.
Is Kryptos open about its security?
Yes. We use industry-standard platform primitives — SQLCipher and Android Keystore on Android, with CryptoKit, Keychain, Face ID, and Touch ID planned for iOS — rather than rolling our own crypto.
Take control of your documents today.
Available on Android today. iOS is coming soon. Free download — Pro features optional.