NextVault

ThingSmart

About this app

NextVault is a privacy-first password manager that keeps your credentials
fully encrypted on your device — no cloud, no subscriptions, no tracking.

🔐 SECURITY FIRST
- AES-256-GCM encryption with PBKDF2 key derivation (600,000 iterations)
- Master password protected with Android Keystore
- Biometric (fingerprint) login support
- Auto-lock after configurable idle timeout
- Screenshot protection on all sensitive screens
- Anti-phishing phrase displayed at login for peace of mind
- Security audit log for all vault activity

📂 ORGANISE EVERYTHING
- 14 built-in categories: Logins, Bank Accounts, Credit Cards, SIM Cards,
Wi-Fi Networks, Personal ID, Secret Notes, Document Photos, Business Cards and more
- Custom categories with your own field types and drag-to-reorder fields
- Collections to group records (Personal, Business, etc.)
- Favourites for quick access
- Hide unused categories to keep things clean

🔑 POWERFUL FEATURES
- TOTP/OTP authenticator built-in — no separate app needed
- QR code scanner for instant OTP setup
- Password health dashboard: weak, reused, old and breached password detection
- Have I Been Pwned (HIBP) breach check — k-anonymity, your password never leaves your device
- Password & passphrase generator with entropy display
- Android Autofill Service — works with Chrome, Firefox, Edge and all apps
- Document photo storage in private encrypted storage
- Share bank details, addresses and business cards via WhatsApp or SMS

📤 BACKUP & PORTABILITY
- Encrypted local backup (.nvbackup) — bundles your salt and database in one secure file
- Encrypted export/import with independent export password (.nextvault)
- CSV import from 1Password, Bitwarden and LastPass
- Cross-device migration via export/import

🎨 BUILT FOR ANDROID
- Full dark mode support
- Tablet optimised with two-pane layout
- Material Design 3 interface
- Navigation drawer for quick access to all features
- No ads. No analytics. No internet required.

YOUR DATA STAYS ON YOUR DEVICE
NextVault stores everything locally in a SQLCipher-encrypted database.
Nothing is ever uploaded, synced or shared. You own your data completely.