Password manager for Android

Your passwords stay yours. No account. No internet.

VoicuPass keeps your passwords encrypted on your phone. There is no account to create, no server of ours, and the app has no permission to use the internet. If you ever need it, a printed Emergency sheet lets you, or someone you trust, get back in.

Coming soon toGoogle Play

See how it protects you

Android 8.0 or newer
English and Romanian
No ads, no tracking

Three promises

Private by design, not by a setting.

Most password managers keep a copy of your vault on their servers. VoicuPass was built the other way around: we have no server at all.

No internet. Not even a little.

VoicuPass does not have Android's permission to use the internet, so it cannot connect to anything. It works exactly the same in airplane mode.

No account to break into.

No sign-up, no server, no database of everyone's passwords waiting to leak. Your passwords are kept on your phone, encrypted. A safe copy you save, or Android's automatic backup, is encrypted too.

A paper key for bad days.

When you set it up, VoicuPass gives you an Emergency sheet to print. On your phone it lets you choose a new code if you forget yours. On a new phone, together with a safe copy or Android's backup, it opens your passwords again.

How it works

Ready in a few minutes.

No account to create, no email to confirm. You open the app and follow three steps.

Choose a 6-digit code.
Add your fingerprint or secure face unlock if you like.
Print your Emergency sheet.
Keep it at home, somewhere safe, the way you keep cash or a passport.
Add your passwords.
Type them in, or bring them all at once from Chrome, Edge, Firefox, Bitwarden, 1Password or LastPass. Then delete the exported file.

Inside the app

Everything you need. Nothing you do not.

VoicuPass does the everyday things well and keeps the screens simple.

Passwords, Wi-Fi and cardsShow a Wi-Fi network as a QR code so guests connect without typing.
2-step codesThe changing codes many sites ask for after the password, right next to it.
Strong passwords in one tap12 to 32 characters, without look-alikes such as 0 and O.
A health checkSee which passwords are easy to guess or used for more than one account. It runs on your phone, never online.
Older passwords keptThe last 10 passwords of each account, in case a site still wants the old one.
Safe copyOne encrypted file you can keep anywhere. It opens only with the recovery key from your sheet.
Trash with undoNothing is lost by a wrong tap. Items stay in the trash until you empty it.
Locks itselfRight away, or after 1, 5 or 15 minutes.
Cleans up after youA copied password is marked private and cleared after 30 seconds. Some phones or keyboards may keep their own copy.
No screenshotsAndroid blocks screenshots, screen recording and the recent-apps preview of VoicuPass.
Made for large textDesigned for large text and TalkBack, in light or dark mode.
In your languageEnglish and Romanian, following your phone's language.

Security

How it protects you

In plain words first. The technical details are below for anyone who wants to check our work.

Your passwords are locked with strong encryption (AES-256) before they are saved.
Your 6-digit code works only together with a key kept in your phone's secure keystore, in security hardware on almost every phone. Someone who copies the file cannot try codes on a computer.
After 5 wrong codes in a row, VoicuPass makes you wait: 30 seconds, then 1, 5 and 15 minutes, and up to one hour for each further try. Your passwords are never deleted because of wrong codes.
Every VoicuPass screen ignores taps that come through another app's floating window, and the keyboard is asked not to learn what you type.
Keep your Emergency sheet like cash. With the sheet and a copy of your encrypted file, anyone can open your passwords. If you save the sheet as a PDF, print it and delete the file.
Keep a screen lock on your phone. VoicuPass warns you when the phone has none, because a phone anyone can open is the weakest point.

Technical details

Encryption. AES-256-GCM with a random 256-bit data key.

Ways in, each wrapping the same data key. The 6-digit code (PBKDF2-HMAC-SHA256, 100,000 rounds, then a chain of HMAC rounds with a non-exportable key in Android Keystore: StrongBox when the phone has it, hardware-backed unless the phone has no secure hardware); the 128-bit recovery key printed on the Emergency sheet; and, if you turn it on, a fingerprint key that needs your fingerprint for every use.

Wrong codes. Each attempt is counted before it is checked, and the waits survive a restart.

Files. No INTERNET permission. Android's backup may include only the encrypted vault file. The file stores a vault id, the sheet number and the sheet date in plain form; everything else is encrypted.

Questions

Good questions, straight answers

Can you see my passwords?

No. The app has no internet access and we run no server. Anything that leaves your phone, a safe copy you save or Android's own backup, is encrypted and opens only with your Emergency sheet.

What if I lose my phone?

Install VoicuPass on the new phone and open your safe copy, or Android's automatic backup if it was on, with the recovery key from your Emergency sheet. Make a safe copy now and then, and keep it away from the phone.

What if I forget my code?

Use your fingerprint, if you turned it on and have not added a new fingerprint since, or your Emergency sheet, and choose a new code. After a reset with a fingerprint, deleting for good also needs your sheet for the next 3 days.

What if I lose both the code and the sheet?

Then, unless your fingerprint still opens it, nobody can open those passwords, not even us. That is the price of a lock with no spare key in someone else's drawer. You can start again with an empty vault.

Does it work on a computer or an iPhone?

Not today. VoicuPass is an Android app.

Coming soon to Google Play.

Questions until then? Write to us at support@voicupass.com