Your secrets, armored.
Kavach is a zero-knowledge, offline-first vault for Android. Passwords, cards, documents, and secret files — encrypted with AES-256 on your device. No accounts. No servers. No tracking.
Coming soon to Google Play.
Everything you need to protect
One armored vault for your whole digital life.
Passwords & 2FA
Logins with built-in TOTP codes, a strong password generator, and breach checks.
Cards & banking
Credit cards, bank accounts, and insurance policies, all encrypted at rest.
Identity documents
Passports, licences and IDs — with expiry fields you won't forget.
Secure files
Store confidential documents and photos as individually encrypted files, viewable only inside the app.
Inner Vault
A second biometric lock for your most sensitive items.
Hardware-backed
Android Keystore, biometric unlock, scrambled PIN pad, and screenshot blocking.
Google Drive backup — to your Drive, encrypted
Kavach works entirely offline. If you choose to back up, your vault is encrypted on your device and uploaded to a private folder in your own Google Drive.
- Kavach requests only the
drive.appdatascope — access to its own private application-data folder, nothing else in your Drive. - The backup is encrypted with AES-256-GCM under a password only you know, before it leaves the device. Google can't read it, and neither can we.
- We operate no servers and collect no data. Sign-in is handled by Google; Kavach never sees your Google password.
- You can disconnect Drive and delete the backup from within the app at any time.