Indie apps for iOS, Mac & Android
MSafe
A password manager that can't phone home.
Your vault is stored on your phone, encrypted with AES-256, and there is no server to breach because MSafe doesn't operate one. No account to create. No email to verify. No cloud to sync to.
On Android, free stores up to 10 credentials and Pro removes the cap with a one-time purchase. On iPhone, a single paid app with no cap.
Features
AES-256
Every credential is encrypted on-device with a key derived from your master password.
No internet access
MSafe is built without internet permission, so Android refuses to let it make any network call. The app physically cannot phone home.
Biometric unlock
Optional fingerprint unlock that asks for your fingerprint every time. On Android 11 and later you can also let your phone's PIN, pattern or password unlock it. Your master password always works as a fallback.
You control your backups
Export individual credentials or your full vault as a printable QR-code PDF, write entries to NFC tags, or save the whole vault as an encrypted .msafe file. All exports stay encrypted.
Password health
A built-in strength meter on the password generator, plus a Password Health dashboard that flags weak passwords and ones you've reused across sites.
Android autofill
Set MSafe as your autofill provider and fill credentials into apps and browsers with one tap, gated by biometric or master password.
Passkeys
On Android 14 and iOS 17 and later, save passkeys in MSafe and sign in to websites and apps with them. Each sign-in asks for your biometric or master password, and passkeys move between Android and iPhone with your encrypted backups.
Material 3
A clean, modern Android interface with light and dark themes that follow your system setting.
Ten-strike wipe
Ten consecutive wrong master-password attempts wipe the vault. There is no recovery email and no back door - your master password is the only key.
What MSafe will never do
Request network access. Create an account or collect your email. Embed analytics, crash reporters, or tracking SDKs. Show ads. Upload your vault to a server, because there are no servers. The only way your vault leaves your phone is if you explicitly export it - and even the exports are encrypted.
Permissions
Camera
Only when you scan a QR code to import.
NFC
Only when you read or write a tag.
Biometric
Only if you turn on fingerprint unlock.
Autofill and passkeys
Only if you enable them in Android system settings.
No Internet permission. The app cannot make network connections - QR scanning happens fully on-device with the open-source ZXing decoder, and nothing is sent to Google or any other server.
System requirements
Android 8.0 or later; passkeys need Android 14 or later. Optional features need the matching hardware: NFC, camera, and a fingerprint sensor.