SuperPassword
Passwords, cards and documents — kept on your phone
SuperPassword runs entirely on your device. There is no account to create and no email to confirm: you set a master password and start using it. The app does not sync to a cloud, does not show ads and does not collect statistics — there is nothing to send and nowhere to send it.
Three things you can verify
Works offline
The Android build ships without the INTERNET permission, so the app has no way to reach the network. On iOS no feature makes a network request either, text recognition included.
Encryption from the OS
AES-256-GCM and PBKDF2-HMAC-SHA256 come from the system: CryptoKit and CommonCrypto on iOS, JCE on Android. The app implements no cipher of its own.
Only you know the master password
No copy exists — not with the developer, not on a server, because there is no server. The honest flip side: a forgotten password cannot be recovered.
17 card types
Each with its own fields, so nothing has to be dumped into a shapeless note. Any type takes custom fields, and folders and tags keep things findable once the vault grows.
What the app does
Face ID, Touch ID or a PIN
A short PIN for everyday unlocks; the master password is always the fallback.
Search from two letters
Across names, logins, addresses and numbers. Passwords are never searched, and “sberbank” finds “Сбербанк” — and the other way round.
Document scanner
Straightens the page, removes perspective and reads the text on the device. It offers to fill the fields and never overwrites what you typed.
Password generator
Any length, with a strength meter. Look-alike characters such as zero and capital O are left out, so a password you copy by hand still works.
Auto-lock and clipboard
Immediately, after one, five or fifteen minutes — or never. Whatever you copy clears itself after the interval you choose.
Backups
An encrypted archive you send wherever suits you. There is a spreadsheet export too — and the app says plainly that such a file is not protected.
Numbers, not promises
No promises of “100% protection”. Concrete algorithms and parameters instead, named outright — so you can compare them with any other password manager.
What to know up front
The master password cannot be recovered
Neither the developer nor the app holds a copy. A forgotten password means the vault is gone — keep a backup.
The spreadsheet export is not encrypted
The file is written only after you confirm in as many words, and it stays on the device. After that it is exactly as protected as wherever you send it.