
Privacy-first password manager with local storage and bring-your-own-cloud sync across Google Drive, Microsoft OneDrive, and Dropbox. Your Secrets. Your Control.
Your Secrets. Your Control.
Most password managers want you to trust a company you don't know with your sensitive data. They control the servers and the keys, and you have to hope nothing goes wrong. The Vault does things differently. Your encrypted vault files stay on cloud storage you already use and trust, like Google Drive, OneDrive, Dropbox, or soon, your own server.
Focused Hunts makes the app, but we never see your data, don't run servers that store it, and have no mechanism to access it. There's nothing for us to breach because we don't hold your information.
The Vault is free for personal use and always will be this way. You get strong encryption, multi-cloud sync, YubiKey support, TOTP, autofill, and support for multiple devices, all without subscriptions, accounts, or usage limits. Consumer users aren't the product, and we aren't funding this through ads or data collection.
Our business model is straightforward: for-profit organizations that need Microsoft SharePoint support, centralized audit trails, or SSO pay for those features. The consumer app is and will always be free; that's why we built this in the first place.
Google Play • Microsoft Marketplace • Focused Hunts
This is the source-available release of The Vault, published under the Business Source License 1.1. Each tagged release corresponds to a version shipped to the Google Play Store and/or Microsoft Store.
You are free to:
Commercial use requires a separate license: contact Focused Hunts for details.
See BUILDING.md for prerequisites, missing files you need to supply (OAuth credentials, vendored packages), and build commands.
Quick start:
flutter pub get
flutter analyze
flutter test
flutter build apk --release # Android
flutter build windows --release # Windows
The Vault's cryptographic implementation is fully transparent in this repo. Key files to audit:
Found a vulnerability? See SECURITY.md for responsible disclosure.
This project is licensed under the Business Source License 1.1.
Built by Focused Hunts
| Layer | Technology |
|---|
| Framework | Flutter (Dart) |
| State Management | Riverpod |
| Database | Drift (SQLite) |
| Encryption | AES-256-GCM, Argon2id (native FFI) |
| Android Native | Kotlin (YubiKey, Passkeys, Autofill) |
| Windows Native | C++ (WebAuthn COM, Named Pipes, TPM) |
| Browser Extensions | TypeScript (Chrome MV3, Firefox, Edge) |
| File | Purpose |
|---|
lib/core/security/crypto_service.dart | AES-256-GCM encrypt/decrypt |
lib/core/security/key_derivation.dart | Argon2id + HKDF-SHA256 |
lib/core/services/yubikey_service.dart | YubiKey challenge-response |
lib/features/auth/ | Authentication state machine |
lib/features/sync/ | Multi-cloud sync engine |