Kryptix: A Truly Offline Password Manager Built for People Who Don’t Trust the Cloud
Most password managers today are cloud-first products wearing a privacy costume. You create an account. You sync. You trust a company, their servers, their employees, their breach history, and their incentive to keep you inside their ecosystem forever. Even the “zero-knowledge” ones still require you to believe a lot of marketing claims you can’t independently verify. I wanted something…
In an era where many password managers rely on cloud storage, Kryptix offers a unique alternative. This privacy-focused tool is designed to keep all your sensitive data—passwords, recovery phrases, and high-sensitivity secrets—securely stored on your own device, without the need for cloud synchronization. By running on both mobile and desktop platforms, Kryptix ensures your data remains local-first, minimizing reliance on third-party servers.
Kryptix distinguishes itself by featuring three specialized vaults, each dedicated to different types of sensitive information. This approach allows for tailored handling of passwords, recovery phrases, and hardcoded PINs, enhancing security based on the nature of the data. For instance, recovery phrases and hardcoded secrets are treated with extra care due to their higher risk if compromised.
The application employs a robust encryption model, using AES-256-CBC combined with SHA-256 key stretching and a MAC for integrity checks. Your master password serves as the root of trust, with biometric authentication (such as Face ID, fingerprint, Windows Hello, or Touch ID) acting as a convenience layer. Importantly, biometrics are only enabled after the master password has been successfully unlocked, ensuring an additional layer of security.
Backup and restore of the entire vault are handled through a custom .kryptix format, which also includes encryption and integrity verification. Import and export functionalities are supported, with options for both merge and replace modes, providing flexibility in managing your data across different devices.
Kryptix is committed to transparency and security. The source code is publicly available under the PolyForm Noncommercial License, allowing anyone to audit the encryption, storage, and data handling processes. This license restricts commercial use, ensuring the project can be sustained without the potential conflicts of commercial interests.
The tech stack behind Kryptix includes React Native and Expo for the mobile application, while the desktop version utilizes Tauri 2, React, and TypeScript. The shared @kryptix/core package ensures consistency in encryption, types, and vault formats across both platforms. Biometric unlock features are also integrated, enhancing the user experience.
Currently, Kryptix supports full functionality for passwords, recovery phrases, and hardcoded PINs, along with biometric unlock on both mobile and desktop platforms. Full-vault encrypted backup and restore capabilities are available, along with multi-language support and import/export options for passwords in JSON and CSV formats. The desktop version also includes categories for better organization.
Despite these features, Kryptix is still evolving. The roadmap includes further hardening, independent security reviews, and refinements to the mobile settings. Users interested in exploring Kryptix or providing feedback can find the repository on GitHub at https://github.com/nima-mehr/Kryptix. The project encourages feedback, security reports, and constructive criticism, emphasizing the importance of keeping your secrets under your control.
Written by urgent.news from Dev.to's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
