PassForge - Free & Offline

Sam @BeInspired

About this app

PassForge is a fully offline password manager and generator for Android that keeps your credentials safe without ever connecting to the internet. Every password, vault entry, and hint is encrypted on-device using AES-256-GCM backed by the Android Keystore - your data never leaves your phone. No accounts, no cloud sync, no analytics, no tracking. Just strong, private security you can trust.

Create passwords your way with three generation modes: standard passwords with full control over length, character types, and ambiguous character exclusion; dictionary-based passphrases built from a 1,000+ word list with customizable separators and capitalization; and numeric PINs from 4 to 12 digits. Every generated password is guaranteed to include at least one character from each selected type. The built-in strength checker analyzes your passwords in real time, showing a 0–100 score, entropy in bits, estimated crack time against a 10-billion-guess-per-second GPU cluster, and actionable feedback to help you improve weak passwords. It even flags common passwords from a built-in dictionary.

Store your credentials in the encrypted Password Vault, protected by a master password with PBKDF2 key derivation (100,000 iterations). Vault passwords are double-encrypted: first with your master-key-derived AES-256-GCM key, then again via EncryptedSharedPreferences. Search, edit, and organize your credentials with confidence - passwords are always masked and require biometric or device authentication to reveal or copy. Back up your vault to an encrypted .spg file with its own export password, and restore it on any device. The app automatically clears copied passwords from the clipboard after 30 seconds.

Your privacy is the foundation of PassForge. The app declares zero Android permissions - no internet, no camera, no contacts, no storage. Screenshots and screen recording are blocked on all sensitive screens. The vault auto-locks when backgrounded, and a 5-attempt brute-force lockout keeps guessers at bay. A built-in privacy policy is available offline in the app. PassForge is security you can verify: no third-party SDKs, no hidden network calls, no data collection of any kind.

Features:
• Three generation modes: Standard Password, Passphrase, and PIN
• Password length from 4 to 128 characters; passphrase from 3 to 8 words • Toggle lowercase, uppercase, digits, symbols, and ambiguous character exclusion
• Quick Generate: one-tap 20-character strong password from the home screen
• Real-time strength checker with score, entropy, crack time, and feedback
• Common password detection from a built-in list
• Encrypted Password Vault with AES-256-GCM and master password protection
• PBKDF2WithHmacSHA256 key derivation (100K iterations, 32-byte salt)
• Double-layer encryption: master key + EncryptedSharedPreferences
• Biometric and device credential authentication for sensitive actions
• Vault import & export with password-protected .spg files
• Password history: last 20 passwords, individually encrypted, tap-to-reveal • Password hints: encrypted labels and clues for generated passwords
• Auto-clear clipboard after 30 seconds
• Screen capture protection (FLAG_SECURE) on all sensitive screens
• Auto-lock vault on background
• Brute-force lockout after 5 failed attempts
• Dark mode with system toggle
• 6 Material Design accent colors
• Zero permissions - fully offline, no internet access
• No analytics, no ads, no third-party services
• Built-in offline privacy policy.

What’s new

- Flexible Generation: Create Passwords, Passphrases, or PINs with a "Quick Generate" one-tap feature.
- Security Insights: Real-time strength scores, entropy calculations, and crack-time estimates.
- Encrypted Vault: Secure storage using AES-256-GCM and PBKDF2, protected by biometric login.
- Privacy Hardening: Includes screen capture protection, auto-clearing clipboard, and zero app permissions.
- Total Privacy: 100% offline; your data never leaves your device.