Operator Crypt
Passwords and documents, encrypted on your phone.
One vault for logins, cards, Wi-Fi keys, notes and files of any type. No account, no cloud and no network permission: what you store never leaves the device unless you export it.
Inside the app
Designed for the dark
Every screen below uses a demo vault with made-up records and documents.
Features
Everything sensitive, in one place you control
Logins, cards, keys and notes
Title, username, password, URL and notes, with the last five passwords kept in history. Favourites, sections, sort and wildcard search.
Strong passwords on demand
8 to 64 characters from the operating system's secure random generator, with look-alike characters removed and entropy shown.
Copy, then wipe
Copied passwords are cleared automatically after 15 seconds to 2 minutes and marked sensitive on Android 13 and later.
Any file, any size
PDFs, images, spreadsheets, archives, media. Encrypted in 1 MiB chunks so large files never sit decrypted in memory. Preview images and text in the app.
A second lock per item
Protect any item with no PIN, a universal PIN, or its own custom PIN. The vault key is mixed into every PIN key, so PINs cannot be attacked offline.
Recovery key and backups
A recovery key is shown once at setup. Encrypted .ocbak backups restore on any device with your passphrase.
Duress vault
Several vaults per device, with nothing revealing how many. A vault marked for duress destroys all others when opened.
Auto-lock and throttling
Locks after 30 seconds to 15 minutes, or when the app leaves the screen. Wrong attempts are slowed down, and the delay survives restarts.
Export or erase, any time
Export a decrypted copy, destroy a vault, or erase all app data on the device from the lock screen. Policies are readable offline in the app.
Security model
How your data is protected
Standard, well-reviewed primitives, combined so that every item, every document chunk and every PIN mode is bound to its context.
| Purpose | Mechanism |
|---|---|
| Passphrase to key | Argon2id, 64 MiB memory, 3 passes, 2 lanes, 256-bit random device salt |
| Vault index | AES-256-GCM with a fresh 96-bit nonce on every save |
| Key hierarchy | A random 256-bit data key, wrapped under the passphrase key and the recovery key |
| Each item | Its own random 256-bit key. Documents are encrypted in authenticated 1 MiB chunks |
| PIN-protected items | Item key sealed under HKDF(data key, Argon2id(PIN)). No PIN hash is stored |
| Context binding | Every encrypted box carries vault, item and protection mode as associated data |
What it cannot protect against
A device that is already compromised (malware, rooted or jailbroken), a weak passphrase, and decrypted copies you export or open in other apps. There is no back door: without your passphrase or recovery key, nobody can recover your data, including us.
Availability
Where to get it
Operator Crypt is released for Android and iOS. Every version works fully offline and needs no account.
- Encryption
- AES-256-GCM, per-item keys
- Key derivation
- Argon2id · 64 MiB · 3 passes
- Documents
- Chunked, 1 MiB authenticated blocks
- Network
- None. No Internet permission
- Account
- None. No sign-up, no server
- Data collected
- None. No analytics or SDKs
| Platform | Where | Status |
|---|---|---|
| Android | Google Play | Coming soon |
| iOS | App Store | Coming soon |
Documentation
Policies and support
The same texts are built into the app and readable offline under CFG › Privacy & your data.
- PolicyPrivacy PolicyWhat the app stores, where, and your rights under GDPR and US state laws.
- AgreementTerms of UseLicence, your responsibility for keys, duress mode, liability.
- DisclosureStore data disclosuresStore privacy declarations, permissions, age rating.
- HelpSupport & FAQRecovery, backups, moving to a new phone, contact.
- NoticesOpen-source licencesThird-party components and fonts used in the app.