Features in detail

No cloud. No servers.

All your data is stored exclusively on your device. There is no cloud synchronisation, no server access and no hidden data transmissions. Your passwords are as secure as your smartphone itself.

This also means: when you have no internet, the app still works. And if our servers went offline — which is technically impossible because we don't have any — your app would remain fully usable.

AES-256 encryption

Sensitive contents are encrypted with AES-256 — the same standard used by banks and governments worldwide. The encryption keys are generated and managed by the hardware-backed Android Keystore — they are cryptographically bound to your device. Your master password serves as an additional authentication layer and is hardened with PBKDF2 (600,000 iterations) against brute-force attacks.

What does this mean in practice? Even if someone stole your phone and read out the storage: without your master password, all data is unreadable noise.

Biometric login

Instead of entering your master password every time, you can unlock the app via fingerprint or face recognition. The biometric is registered through the Android Keystore as an additional auth method for the safe key – a simple system permission is not enough.

Important: If you add a new fingerprint on your device, the biometric is reset for security reasons. This prevents new biometric data from accidentally gaining access.

More than just passwords.

MyLocalSafe is more than a password manager. Store credit cards, debit cards, PINs, confidential notes as well as documents and photos — all in the same encrypted vault, secure and offline.

That way you have card data, ID copies or receipts at hand exactly when you need them — without ever entrusting them to a cloud.

Logins & 2FA in one place.

MyLocalSafe can generate TOTP codes — just like Google Authenticator or Authy, but directly in your safe. Simply scan or enter the 2FA secret during setup, and the app generates the current code every 30 seconds. Login data and two-factor codes live in one place — fewer apps, more overview.

You can also scan QR codes that are shown during 2FA setup. Recognition runs completely locally on your device — no images are transmitted anywhere.

Autofill & quick access.

With the Android autofill service, MyLocalSafe fills in your credentials automatically in apps and browsers — fast, secure and convenient. Activate it once in the Android settings, and it works everywhere. With a swipe gesture, you also copy passwords and sensitive data in a flash.

For Chrome users: In Chrome, "Autofill with another service" must additionally be activated. This is a Chrome quirk, but solved with a tap in the Chrome settings.

Total freedom. No lock-in.

Create password-protected ZIP archives with all your entries, photos and documents. You choose where to store them: cloud, USB stick, external hard drive or simply on another device.

The archives use AES-256 and can be imported again at any time — also on a new smartphone. No provider lock-in, no forced cloud: that's your path to a secure migration or to restoring after device loss.

Emergency PDF

For the absolute emergency, you can create an encrypted PDF with all credentials. Protected with AES encryption, print it or store it in a safe place — ideal for estate planning or as a final safety net.

Important: The emergency PDF is as confidential as a safe key. Destroy it securely when you no longer need it.

Password health check

The app analyses your stored passwords and shows you:

• Weak passwords that are too short or too simple
• Duplicate passwords that you use on multiple sites
• Old passwords that haven't been changed for over a year

From this, an overall score of 1000 points is calculated — a simple way to keep an eye on your password hygiene.

Strong passwords at the tap of a button.

Need a new password? The built-in generator creates cryptographically secure passwords — either as classic-cryptic character strings or as memorable word combinations (similar to "CorrectHorseBatteryStaple").

You can freely adjust length, character set and composition.

CSV import from other managers

Switching from another password manager? No problem. The CSV import reads data from Excel, other password managers and arbitrary tables — with intelligent column detection and manual correction options for complicated datasets. A migration from KeePass is also possible.

Clipboard protection

When you copy a password to the clipboard, it is automatically deleted after 60 seconds. From Android 13 onwards, the copied content is additionally marked as "sensitive" and not displayed in plaintext in the clipboard preview.