Frequently Asked Questions

SolidPass is a commercial-grade, privacy-first, offline password manager and personal vault. It stores your secrets locally on your device and never transmits them to a cloud service.

SolidPass is currently available for Android and iOS through their respective app stores. Desktop builds for macOS, Windows, and Linux are planned and will be released in future updates. See the app store listings for platform-specific availability.

All sensitive data is encrypted locally using AES-256-GCM. A 256-bit Database Key (DK) encrypts the database, and each item uses unique initialization vectors for authenticated encryption.

Your Master Password is never stored. SolidPass derives a Key Encryption Key (KEK) from the Master Password using PBKDF2-HMAC-SHA256 (10,000 iterations) together with a cryptographically-random salt. The DK is encrypted with the KEK and stored in local metadata. The Master Password itself is only used to derive keys in memory and is zeroized (overwritten) after use.

No. SolidPass is built with a strict zero-tracking policy. There are no analytics, ads, or third-party trackers integrated into the application.

When you enable biometric unlock, a derived database key may be stored securely in the OS-provided secure enclave (Keychain / Keystore) with device authentication required. Biometric data never leaves your device and is never accessible to SolidPass.

When you first open SolidPass you will be prompted to create a Master Password. This Master Password unlocks your vault and is used to derive the cryptographic keys. Choose a strong, memorable password — if you lose it, there is no recovery.

Use the add (+) button inside the app to create new secrets. Each item supports fields such as username, password, notes, and optional TOTP. All fields are encrypted before being written to storage.

Yes — SolidPass supports tags and secret types to help you categorize and find entries quickly.

You can export your vault to a fully encrypted backup file with the extension .solidpass. The file is encrypted with your vault's keys and is signed with a SHA-256 checksum for integrity. The exported file can be stored locally or transferred by you to another device.

Use the import/restore feature in the Settings screen and select the encrypted backup file. You will need to enter the Master Password that was active when the backup was created to decrypt and restore the vault.

SolidPass intentionally does not provide automatic cloud sync. If you want to move your vault between devices, export an encrypted backup and import it on the target device.

From the Settings screen you can choose to wipe the vault. This removes the encrypted database and all associated metadata from the device. Wiping is irreversible. If you need a copy before wiping, export an encrypted backup first.

There is no password recovery built into SolidPass. The Master Password is the sole secret that protects the vault. If you lose it, the encrypted data is inaccessible. This design is intentional to preserve privacy and local-only security.

SolidPass is a paid application available through the Apple App Store and Google Play. The app is ad-free and does not include third-party advertising or tracking.

Prices may change from time to time and can vary by region. We may run promotions or accept promo codes for limited periods; when offered, discounts are processed by the store platforms. For billing questions or refund requests, please consult the store where you made the purchase as they handle transactions and refunds.

SolidPass is distributed via third-party platform stores (Google Play, Apple App Store). These stores may collect transaction data and device identifiers during purchase. Review the app store policies for details.

Try updating to the latest version from the app store. If the issue persists, reinstalling the app will wipe the local vault; ensure you have an exported backup before reinstalling.

Contact us at solidpass@airmicroservices.com.