Fully Offline by Design

Private Stash does not request internet permission - it physically cannot send your data anywhere. There are no accounts to create, no servers to breach, and no cloud copies of your credentials. Everything lives on your device and only on your device.

Modern Encryption

Your stash is encrypted at rest with AES-256; your master password is turned into an encryption key by Argon2id, a state-of-the-art algorithm designed to resist brute-force attacks. Keys are further protected by your device's hardware-backed Android Keystore.

Don't take our word for it — the cryptographic core is open source. Review it on GitHub.

Biometric Unlock

Unlock with your device biometrics through Android's secure system prompt. Your biometric data is handled entirely by the operating system and is never seen or stored by the app.

Automatic Safeguards

The app locks itself the moment your screen turns off, and its screens are protected against screenshots and screen recording. Sensitive fields stay hidden until you deliberately reveal them, one field at a time.

Smart Search

Find any entry in a keystroke or two. Search matches the start of any word in a name, ignores accents and special characters, and can match phrases mid-name - so "ban" finds "First National Bank" without you typing the whole thing.

Backup & Recovery

Export your encrypted stash whenever you choose, with gentle reminders when a backup is getting stale. A recovery code, generated at setup and regenerable at any time, gives you a way back in if you ever forget your master password.