It's hard to trust anyone with your passwords, especially when it comes to services that use the cloud or store your passwords on their servers. That's why X:/Passwd has absolutely no access to the internet, allows for local importing and exporting of your vault, and doesn't rely on any external services or servers.

Your passwords are encrypted using AES-256-CTR encryption, and are then re-encrypted with AES-128 and stored using Android's secure KeyStore. You can log into your vault using your fingerprint as well.

Exporting your vault generates a ".passwd" file in the application's data directory. The file contains a JSON encoded version of your vault, and allows you to easily import it at a later date, or store it safely on any other device. All passwords are encrypted using AES-256 (with a different IV for each one), and the key is derived from your vault password using PBKDF2, and a different salt for each password.

If you'd like to view and verify the source code, you can view it on GitHub: https://github.com/Xtrendence/X-Passwd

If you experience any bugs or issues, please email me and I'll try my best to help.