About this app

Features:
* Encrypted Notes
* Encrypted Photos
* Searchable by Title and Content
* Backup and Device Sync via Google Drive
* Auto Logout
* AES 256 Encryption

This application allows the user to manage "secrets" such as passwords, pin codes, personal notes or photos in encrypted vaults using a simple list interface. The application locks your secrets under one master password. It creates a separate vault for each secret and encrypts it using a unique key and AES 256 encryption. Access to your secrets is only allowed if you know the master password. The application enables the user to set this password on initial startup and through the tools drawer. The application does not store your password or a hash of your password to prevent a number of malicious attacks against secrets stored in your vaults. There is no password recovery mechanism by design to prevent attacks against the reset mechanism.

Merlin's Secret Vault is also capable of using your google drive to store and synchronize your secrets in your personal "G" drive. This allows synchronization with other devices and enables secure secret backups to improve the durability of your secrets. The secrets in the "G" drive are encrypted client side so clear secrets never leave the device. This protects your secrets stored in the "G" drive from attackers that might breach your google drive or account.

Even if your device is lost or stolen, your secrets are still safe, as no secret is persisted to the device in the clear. All secrets are always encrypted at rest. In addition, the app times out in 5 minutes if not used, locking the vault. By providing a strong master password, brute forcing your password will be extremely difficult. Brute forcing keys on individual vaults is consider theoretically impossible. The 256 bit vault keys are generated using a secure random number generator.

Both secret names and secrets are obfuscated in your vaults to remove an attacker's ability to learning anything about a secret name or its contents, even if they were to obtain one of the vaults.

The application also supports two encrypted photos with each secret. This was designed to hold a photo of the front and back of your credit cards, bank cards, insurance cards or photos of anything you want secured. If credit cards are lost or stolen you will still have a copy of important information such as the credit card number and the phone number to call to put it on hold or cancel it.

The main listing interface supports searching for secrets based on both the title and the secret content. That way if you forget the name of the secret but remember part of the secret, you can enter the part you remember to try and find it.

To add a secret, tap the "+" at the top of the interface.

To edit secrets, simply tap on them and edit either the name or title in the details screen.

To delete a secret, long hold the secret in the listing interface and a delete bar will slide in at the top. Press the trash can to delete or the "<-" to cancel.

To take an encrypted photo, choose the front or back tab on the details screen and use the photo button on the screen's toolbar.

New features

Minor bug fixes.

App Permissions

Required to be able to access the camera device.
Allows applications to open network sockets.
Allows access to the list of accounts in the Accounts Service.
Allows applications to access information about networks.
Allows using PowerManager WakeLocks to keep processor from sleeping or screen from dimming.
Allows an application to receive the ACTION_BOOT_COMPLETED that is broadcast after the system finishes booting.