SecDocKeeper

Meerhelm Software

About this app

SecDockKeeper is a local-first document vault that keeps your most personal files — IDs, contracts, receipts, medical records — end-to-end encrypted on your device.
Your documents never leave your phone. There is no cloud, no account, no analytics, and no network calls. A master password unlocks the vault; everything inside is encrypted with AES-256-GCM, with metadata in an encrypted SQLCipher database. Lose the password and not even the developer can recover your data — that's the point.

KEY FEATURES
• End-to-end encryption — AES-256-GCM for files, SQLCipher (AES-256) for metadata
• Master password — derived via Argon2id with OWASP-minimum parameters
• Biometric unlock — fingerprint / face after the first password unlock
• Built-in document scanner — turn paper into encrypted PDFs without leaving the app
• On-device OCR — search the text inside scanned documents, with zero data sent off device
• Folders, tags, automatic classification, full-text search
• Auto-lock — vault locks when the app is backgrounded
• Hidden tags — search-only tags that never appear in any list or count
• Panic mode — quick lock from the app switcher
• Encrypted backup — export the full vault as a single archive you can store wherever you like
• Encrypted sharing — send one document with a separate key, so the file and the key never travel together

PRIVACY BY DESIGN
• No account required
• No telemetry, no analytics, no ads
• No network calls — even fonts are bundled with the app
• Apache-2.0 licensed
• Source code is public: https://github.com/meerhelm/secdockeeper

WHO IT'S FOR
If you keep your passport scan in a notes app, store insurance cards in your photo gallery, or carry tax returns inside email folders — SecDockKeeper gives those documents a real, encrypted home, without trusting any cloud provider with them.

OPEN SOURCE
Every byte of the app, including the cryptography, is public. Audit it, fork it, or build it yourself from source if you don't trust the Play Store binary. The vault format and the threat model are documented in the repository.

What’s new

First internal alpha. SecDockKeeper is a local-first, end-to-end encrypted document vault. AES-256-GCM blobs, Argon2id-derived keys, SQLCipher metadata. Import PDFs and images, scan with the camera, search inside documents with on-device OCR. Folders, tags, and hidden tags for sensitive items. Optional biometric unlock and configurable auto-lock. Encrypted sharing and full-vault backup. No servers, no analytics, no advertising.