Quartz Locker
Offline password vault
Your passwords.
No cloud. No compromise.
Quartz Locker stores your credentials entirely on your device using military-grade encryption. No account. No sync server. No internet permission. Nothing leaves your phone.
Zero Internet Permission
Structurally air-gapped by design. Zero trackers as confirmed by Exodus.
96/100 Low Risk · Static Analysis
OWASP MASVS Compliant
Storage · Crypto · Network · Auth · Resilience
Why Quartz Locker
Truly offline
The app has no internet permission. Your data physically cannot be transmitted. No server breach can expose it.
Zero knowledge
The encryption key is derived from your master password and never leaves your device. The developer cannot access your data.
Portable backups
Export an encrypted backup and store it anywhere you like. Only your password opens it, on any Android device.
Every vault type
Bank accounts, cards, brokerage credentials, government IDs, and freeform notes, each with encrypted file attachments.
Full audit log
Every edit to every field, old value and new, stored encrypted inside the same vault.
8 languages
English, Spanish, Chinese, Hindi, Tamil, Telugu, Kannada, and Malayalam, switchable instantly at runtime.
Security features
PBKDF2-HMAC-SHA256 at 600,000 iterations
Key derivation calibrated to resist GPU-based brute-force attacks even on short passwords. Exceeds NIST SP 800-132 recommendations.
Screenshot and screen recording blocked
FLAG_SECURE prevents any screenshot or screen recording inside the app, including from the notification shade and recent apps.
Auto-lock after 2 minutes of inactivity
The session key and database are wiped from memory. Locking is immediate, not deferred to OS background restrictions.
Hardware-backed biometric unlock
Uses Android Keystore with BIOMETRIC_STRONG. The biometric key is automatically invalidated if new fingerprints are enrolled, blocking attacker access on a stolen device.
Clipboard auto-cleared after 2 minutes
Copied credentials are wiped from the clipboard automatically. Only clears if the clipboard still holds what was copied.
Android Auto-Backup disabled
allowBackup="false" prevents Android from silently uploading the encrypted database to Google Drive without the user's awareness.
Technical specifications
Encryption
AES-256-GCM
Key derivation
PBKDF2-HMAC-SHA256
Iterations
600,000
Key length
256-bit
Database
SQLCipher (SQLite)
Security analysis
Internet permission
None
Analytics / trackers
None
Free. No account. No strings.
Quartz Locker is free to download and has no in-app purchases, no ads, and no telemetry of any kind. If it keeps your credentials safe, consider supporting the developer.