Encrypted vault
Works on your phone alonePasswords, notes and 2FA codes, locked with a key made from your passphrase (Argon2id and XChaCha20-Poly1305). Optional decoy passphrase, growing lockouts, erase after too many wrong tries, panic erase.
We label every feature with what is actually true today.
Passwords, notes and 2FA codes, locked with a key made from your passphrase (Argon2id and XChaCha20-Poly1305). Optional decoy passphrase, growing lockouts, erase after too many wrong tries, panic erase.
Screen lock, root or jailbreak warning signs, and how old the system software is. Unknown checks are shown as unknown, never as passed.
Spots look-alike brand names, the "@" trick, raw addresses and link shorteners. It never opens the link and never says a link is safe.
Checks passwords against the public Have I Been Pwned list. Only the first 5 characters of a scrambled fingerprint leave your phone.
Runs the encryption against published test values and real round trips on your own device, so you do not have to take our word.
End-to-end encrypted (MLS, with a hybrid scheme designed to resist future quantum computers). Safety numbers, key-change alarm, disappearing messages, burn a chat on both phones. Needs a relay server.
End-to-end encrypted. Call setup travels inside the encrypted chat so nobody can swap the call's certificate. Proven on desktop; not yet on phones.
Sends website lookups over HTTPS to a server that refuses known tracker and malware names, for every app. Needs a DNS server.
Makes the keys and config file for the free WireGuard app, on your phone. Needs a VPN server.
Rent a number from your own Telnyx account and read its texts here. Shows the exact cost first and will not buy without a monthly cap.
Scanning installed apps for malware on Android.
None of the features that need a server has been tried on a real phone yet. Voice calls are proven on desktop only.