Private Vault is a zero-knowledge vault for your most sensitive photos, videos, and passwords.

🔒 Zero-knowledge by design
- Every photo, video, and password is encrypted on your device with ChaCha20-Poly1305 (RFC 8439)
- Encryption keys are derived from your PIN via Argon2id (64 MiB / 3 iterations / 4 parallelism — RFC 9106)
- We never see your data. We don't have keys. We don't have servers holding your data.

📸 Photos & videos
- Import from your photo library via Android's Photo Picker — no storage permission needed
- Capture new photos and videos with the in-vault camera — photos never touch the system gallery
- EXIF GPS coordinates can be stripped on import to protect your location
- Encrypted video playback streams to RAM only — no plaintext ever written to disk

🗂️ Albums
- Organize your photos, videos, and files into albums — with smart built-in Favorites, Photos, Videos, and Files albums
- Create your own albums and nested sub-albums
- Rename, pin to the top, set a custom cover, and sort by newest or oldest
- Deleting an album never deletes your media

🔑 Passwords
- Full-featured password manager for logins, passwords, and secure notes
- Strong password generator with configurable length and character classes
- Optional HIBP breach monitoring via k-anonymity: only 5 characters of your password's SHA-1 hash ever leave your device, and only if you opt in

🛡️ Hardware-backed security
- Master Key wrapped in Android Keystore with BiometricPrompt authentication
- StrongBox (Pixel 3+ / Titan M2 / Samsung Knox) used when available, TEE as fallback
- Screen capture and screenshot blocked on every sensitive screen (FLAG_SECURE)
- Auto-lock when backgrounded; configurable timeout; shake-to-lock

🔐 Biometric unlock
- BiometricPrompt with BIOMETRIC_STRONG enforcement (Class 3 biometrics only)
- PIN fallback always available
- Forgot your PIN? Your Vault Key restores the vault without erasing anything — you hold the code, we never see it
- Without a saved Vault Key, a forgotten PIN means full vault erase — no backdoor, no master key, no exception

🌐 Privacy you can verify
- Zero analytics SDKs, zero ad SDKs, zero tracking — we never profile you
- Crash diagnostics (Firebase Crashlytics) are on by default and can be switched off in Settings — they never include vault content, file names, or key material
- The optional HIBP breach check sends only 5 characters of a hash — off by default
- No account creation required, ever
- Nothing you store is uploaded anywhere: your keys and your plaintext never leave the device

📲 System requirements
- Android 10 (API 29) or later
- Fingerprint, face, or iris biometric hardware optional — PIN-only mode fully supported

Made by a small team that believes encryption keys belong to users, not vendors.