SirdasApp

Why can I trust it?

Not even the app's makers can see your passwords

SirdasApp has no internet permission: your entries can't leave this phone on their own and are never sent to anyone, including the people who made the app. SirdasApp has no server and no sign-up; there is no copy of your entries anywhere else. Something leaves only when you tap "Share" or "Back up", and it goes where you choose.

7 layers of protection

  1. 1

    On-device encryption

    Your entries are encrypted with AES-256 and stay only on this phone.

  2. 2

    Hardware key

    The encryption key is protected by the phone's secure hardware (Android Keystore); on supported devices it can't be extracted.

  3. 3

    PIN and attempt brake

    Your PIN is strengthened with 600,000 rounds; after repeated wrong attempts, the wait doubles each time.

  4. 4

    Biometrics and second step

    If you want, fingerprint, pattern or a verification code becomes a second gate.

  5. 5

    Offline

    The app has no permission to access the internet; it can't send your entries anywhere on its own.

  6. 6

    Screen and clipboard protection

    Screenshots and screen recording are blocked; a password you copy is cleared from the clipboard after 30 seconds.

  7. 7

    Auto-lock

    When you leave the app, the vault locks by itself; this lock can't be turned off.

What can't SirdasApp do?

  • It can't connect to the internet
  • It can't send your records anywhere on its ownSomething leaves the device only when you tap "Share"; the sending is done by the app you choose (email, messaging, cloud).
  • It never writes your PIN anywhereThe app's developer can never see your PIN or passwords.
  • It needs no accountYou don't sign up or log in to use it; no name, email or phone number is asked.
  • It asks for no camera, location, contacts or microphone permissionWhen a camera is needed, Google's scanner opens; SirdasApp only receives the scan result, and the text is read on the device.
  • Screenshots and screen recording are blockedScreen-recording apps see SirdasApp as black.

What does it do?

  • It stores your records only on this device, encryptedThe key is created in Android Keystore — in the device's secure hardware where available — and can't be exported.
  • Only you open the vaultWith PIN, pattern or biometrics. After repeated wrong tries, the wait keeps doubling.
  • If you forget your PIN, your recovery key gets you back inYou keep the recovery key; SirdasApp doesn't store a copy.
  • It clears a copied password from the clipboard after 30 seconds

Verify yourself · outside SirdasApp

  • Permissions

    An app that uses the internet shows "Full network access" there; SirdasApp doesn't.

  • Data usage

    Android keeps this number, not SirdasApp.

  • Google Play

    On the Play page: "About this app" → at the bottom "App permissions" → "See more".

    Google derives this list from the uploaded package itself.

  • For the curious

    Install a traffic monitor such as PCAPdroid or NetGuard: you won't see a single packet leave SirdasApp.

    On a computer, read the APK's permissions yourself with aapt2 dump permissions or apkanalyzer manifest permissions.

Good to know

What if my device is stolen or lost?

The vault locks itself when you leave the app (30 s by default).

Even if the files are copied they won't open elsewhere; the key stays in this device's Android Keystore.

There's no remote wipe (no internet): keep the device's own lock and "Find My Device" turned on.

Can the keyboard see my PIN?

Not on the lock screen or while setting up a PIN: there, the PIN is entered on SirdasApp’s own keypad. Windows such as action confirmations and PIN changes use your phone’s keyboard, so use a keyboard you trust. If “Anti-peeking keypad” is on in Settings, action confirmations also use the app’s own keypad.

Keyboard "learning" is turned off in text fields.

Autofill

It only sees the type of the fields on a login screen: username or password.

The password is entered only when you open the vault and pick the account.

It doesn't offer accounts on the device's own screens (settings, lock, SIM).

To be honest

  • If the device is lost and there's no backup, the vault won't come back — keep the automatic backup folder on.
  • The source code isn't open and hasn't passed an independent security audit; you can verify the permissions and network silence yourself with the steps above.

Try it before typing in anything of yours

Don't want to enter your own passwords, cards or ID? No problem. The app comes with a full sample family vault: every record type, pages, reminders and document visuals. Tap, edit, delete; nothing reaches your own vault.

Try the demo vault