About
SecDocKeeper stores your sensitive documents on-device with envelope encryption: every document gets its own AES-256-GCM key, wrapped by a master key derived from your password via Argon2id.
Names, tags, OCR text and the full-text search index live inside a SQLCipher database keyed off the same master. Plaintext never touches disk.
Built in Flutter for Android first, with iOS, macOS, Windows and Linux on the roadmap.
Highlights
-
Envelope encryption
Per-document AES-256-GCM data keys, wrapped by an Argon2id-derived master key. Standard, audited primitives only.
-
Deniable hidden tags
Tags can live as HMAC hashes only — invisible in lists or counts, revealed only when their exact name is typed into search.
-
On-device OCR
Imported scans are read with Google ML Kit on-device and auto-classified. The text never leaves your phone.
-
Portable, controlled sharing
Export a document as a sealed blob plus a separate key file. Send blob and key over different channels. The recipient re-wraps under their own master.
-
Anti-snoop defaults
Auto-lock on background, FLAG_SECURE blocks screenshots, biometric unlock seals the master in the platform keystore.
Other products