SolidPass

What's in this guide

1. 1 Welcome & how SolidPass protects you
2. 2 Getting started — creating your vault
3. 3 Locking & unlocking (password, biometrics, recovery)
4. 4 The Vault — adding & organising items
5. 5 Item types & the fields they store
6. 6 Viewing an item (copy, reveal, 2FA codes)
7. 7 Scanning — cards, IDs, QR codes & attachments
8. 8 Document Scanner
9. 9 Password Generator
10. 10 Security Health
11. 11 Settings
12. 12 Backup, restore & moving to a new device
13. 13 Importing from other apps
14. 14 Autofill
15. 15 FAQ & troubleshooting
16. 16 Security best practices

Welcome & how SolidPass protects you

SolidPass is a personal vault for everything you need to keep private — passwords, two-factor (2FA) codes, payment cards, identity documents, bank accounts, crypto wallets, Wi-Fi credentials, secure notes and more. It runs entirely on your device.

The core promise

• 100% offline. There is no account, no server, and no cloud. The app has no internet permission at all — your data physically cannot leave your device over the network.
• Zero analytics & tracking. No logs, no trackers, no ads, no telemetry.
• Strong encryption. Your master password derives a key with Argon2id — a memory-hard algorithm built to resist GPU and specialized-hardware attacks — which unlocks a random 256-bit vault key. Every item is individually encrypted with AES-256-GCM, including its title, type, tags and attachment names.
• Nothing stored in plain text. The decrypted key lives only in memory while the vault is unlocked and is wiped the moment it locks.

What you'll need

• A master password you can remember (minimum 8 characters — longer is stronger).
• A safe place to store your 3 recovery codes (write them down or print them).
• Optionally, Face ID / Touch ID / fingerprint set up on your device for quick unlock.

Getting started — creating your vault

The first time you open SolidPass, a short setup walks you through three steps. (If you already have a backup file from another device, tap Restore from Backup on the welcome screen instead — see Section 12.)

1. Welcome. Review the "100% Offline" and "Zero Analytics & Tracking" principles, then tap Get Started.
2. Set your Master Password. Enter a password (minimum 8 characters) and confirm it. A live strength meter (Weak → Moderate → Strong) helps you choose a good one. Tap Continue.
3. Save your Emergency Recovery Kit. SolidPass generates 3 recovery codes in the form SP-XXXX-XXXX. Tap Save Recovery Codes (.txt) to export them, then store them somewhere safe. Tap Complete Setup & Initialize.
4. Enable biometric unlock (optional). If your device supports Face ID / Touch ID / fingerprint, choose Yes, Enable or Skip.
5. You're all set. A confirmation screen summarises your protection. Tap Enter the Vault.

Locking & unlocking

Unlocking your vault

• With biometrics (if enabled): the Face ID / fingerprint prompt appears automatically. You can also tap Tap to Scan Biometrics.
• With your master password: type it and tap Unlock.

If you forget your master password

1. On the lock screen, tap Forgot Password? Recover Vault.
2. Enter any 2 of your 3 recovery codes, then tap Verify Codes & Decrypt.
3. Set a new master password and confirm it, then tap Save & Open Vault.

How auto-locking works

• SolidPass locks automatically after a period of inactivity (default 5 minutes — configurable in Settings: 1m / 5m / 15m / Never).
• Optionally, Lock on Minimise locks the vault the instant you switch away from the app.
• You can lock immediately any time with the Lock Vault button at the top of Settings.

The Vault — adding & organising items

The Vault tab is your home screen: a searchable list of everything you've saved.

Finding things

• Search bar — type to match titles, tags, usernames, websites, note content, and 2FA issuer/account names.
• Category filters — tap a pill to show only a type: All Items, Favorites, Passwords, Authenticators (2FA), Cards, Notes, Bank Accounts, Crypto Wallets, Identities, Wi-Fi, Licenses, API Keys, SSH Keys, Recovery Codes, Contacts, or Custom Items.
• Favorites — tap the star on any item to pin it to the Favorites filter.

Adding an item

1. Tap the floating + button.
2. Choose an item type from the grid.
3. For Payment Card and Identity, you'll be asked Enter Manually or Scan & Autofill (see Section 7).
4. Fill in the fields. Every item has a Title (required), an Add to Favorites toggle, a Tags section, and a General Notes field.
5. Tap Create Item (or Save Changes when editing).

Item types & the fields they store

Viewing an item

Tap any item to open its details.

• Reveal secrets. Passwords, CVVs, PINs, API keys, SSH private keys, seed phrases, recovery codes and 2FA secrets are hidden behind an eye icon — tap to reveal.
• Copy fields. Every field has a copy button. Copied secrets are automatically cleared from the clipboard after 45 seconds.
• Live 2FA codes. Authenticator items show a large rotating code with a progress bar, a "seconds remaining" readout and a Copy Authentication Code button.
• Attachments. Cards and Identities display their images/PDFs — tap to preview full-screen or share.
• Favorite / Edit / Delete. Toggle the star, tap Edit Item to change fields, or Delete Item (with confirmation) to remove it.

Scanning — cards, IDs, QR codes & attachments

SolidPass reads documents entirely on-device (offline OCR). Nothing is uploaded.

Scanning a payment card

1. Add a Payment Card and choose Scan & Autofill (or tap Scan Payment Card inside the form).
2. Align the card within the guide. SolidPass captures at full quality and reads the number, expiry and name.
3. The card number is checked with the Luhn checksum and the network (Visa, Mastercard, Amex, …) is detected. If a digit looks wrong, you'll be warned so you can fix it.
4. Review the fields and tap Create Item.

Scanning an identity document (passport / ID card)

1. Add an Identity and choose Scan & Autofill.
2. Capture the document so the machine-readable zone (the two or three <<< lines) is clearly visible.
3. SolidPass parses the MRZ following the ICAO 9303 standard and validates the check digits — when they verify, you'll see "The machine-readable zone was verified", which means the document number, dates and name were read reliably.
4. Review and save. Some fields (like the issue date) aren't in the MRZ, so add those by hand if needed.

Other scanners

• 2FA QR codes — Authenticator items can scan an otpauth:// QR, including Google Authenticator "export" QRs (multiple accounts at once). See Section 13.
• Wi-Fi QR codes — Wi-Fi items can scan the standard Wi-Fi QR to fill SSID, password and security type.

Document Scanner

The Scanner tab is a document store, separate from vault items — ideal for multi-page paperwork you want kept encrypted and exportable as a PDF.

1. Tap + to create a new document, or open an existing one to edit.
2. Give it a Title, then add pages with Scan Page / Take Photo or Import from Photo Gallery (multi-select).
3. Reorder pages up/down or remove them. Pages are optimised for size and encrypted on save.
4. From the list or the full-screen preview, tap share / export to compile all pages into a single PDF.

Also reachable from Settings → Tools & Utilities → Solid Document Scanner.

Password Generator

The Generator tab creates strong, random secrets. Tap the copy icon to use one (auto-cleared from the clipboard after 45 seconds); tap Regenerate for a new value.

Security Health

The Health tab audits your vault entirely on-device and gives you a Vault Score out of 100 (Excellent ≥ 80, Needs Work ≥ 50, otherwise Critical). Expand any section to see the affected items and jump straight to them.

Settings

Security

• Biometric Unlock — enable/disable Face ID / Touch ID / fingerprint (enabling requires a biometric confirmation).
• Lock on Minimise — lock instantly when you leave the app.
• Auto-Lock Timeout — 1m / 5m / 15m / Never.
• Change Master Password — enter current + new password; your vault key is re-encrypted and the vault re-locks.

Backup & Imports

• Export Encrypted Vault (.solidpass) and Restore Vault from .solidpass — see Section 12.
• Import from CSV (Bitwarden, 1Password, Chrome) and Import from Google Authenticator — see Section 13.

Emergency Kit

• Download Emergency Kit — re-export your 3 recovery codes as a .txt file.

Other

• Tools & Utilities → Document Scanner. Autofill setup (Section 14).
• Support & Information → Frequently Asked Questions, Contact Us.
• Appearance follows your device's light/dark setting automatically.

Backup, restore & moving to a new device

Creating a backup

1. Go to Settings → Export Encrypted Vault (.solidpass).
2. Choose where to save/share the file. Keep it somewhere durable that survives an uninstall (e.g. Files / a folder you control).

The .solidpass file is a complete, fully encrypted copy of your vault — all items, their file attachments, and your Scanner-tab documents — and can only be opened with the master password that created it (or that vault's recovery codes). It carries a checksum to detect corruption.

Restoring a backup

On a fresh install: tap Restore from Backup on the welcome screen, pick your .solidpass file, and enter that backup's master password.

Into an existing vault (Settings → Restore Vault from .solidpass): choose either —

• Merge — decrypts the backup and adds its items, attachments and scanned documents to your current vault (keeps what you already have).
• Replace & Import — destructive: wipes the current vault and replaces it with the backup. You'll then unlock with the backup's master password.

Importing from other apps

From a password manager (CSV)

1. Export a CSV from Bitwarden, 1Password, or Chrome.
2. In SolidPass: Settings → Import from CSV, then pick the matching format.
3. Logins are imported (Bitwarden also brings in secure notes) and tagged with the source name.

From Google Authenticator

1. In Google Authenticator, choose Transfer accounts → Export to show a QR code.
2. In SolidPass: Settings → Import from Google Authenticator and scan the QR.
3. One Authenticator item is created per account. (Older HOTP entries are skipped.)

Autofill

Open Settings → Autofill for step-by-step instructions to set SolidPass as your device's autofill provider.

• iOS: Settings → General → AutoFill & Passwords.
• Android: System autofill service picker.
• The screen includes an Open Autofill Settings shortcut that jumps to the right system page.

FAQ & troubleshooting

I forgot my master password. What now?

Use Forgot Password? Recover Vault on the lock screen with any 2 of your 3 recovery codes, then set a new password. Without the password and without 2 recovery codes, the data cannot be recovered — this is by design.

The camera scan didn't read my card / ID correctly.

Improve lighting, remove glare, lay the item flat on a dark surface and fill the frame. For IDs, keep the bottom <<< lines sharp — that's what SolidPass validates. You can always correct any field by hand before saving; a card number that fails its checksum will be flagged.

Why does the app lock when I switch apps?

If Lock on Minimise is on, SolidPass locks the moment it goes to the background for safety. Turn it off in Settings if you prefer, and adjust the Auto-Lock timeout.

Can I take a screenshot?

No — screenshots and screen recording are blocked app-wide, and the app preview is blanked in the task switcher, to keep your secrets off the screen.

Is there a subscription or ads?

No ads, ever, and no tracking. All functionality is available.

Does anything leave my device?

No. There is no network access at all. Backups only leave your device if you explicitly export and share a file.

Security best practices

1. Use a strong, unique master password — this is the one key to everything. A long passphrase is ideal.
2. Store your recovery codes offline — printed or written, kept somewhere separate from your phone. You need 2 of 3.
3. Back up regularly — export a .solidpass file after major changes and before uninstalling or switching devices.
4. Enable biometrics + a short auto-lock — convenient and safe on a device only you can unlock.
5. Turn on Lock on Minimise if you share your device or work in public.
6. Delete plaintext exports (CSV from other apps) as soon as you've imported them.
7. Run Security Health periodically and fix weak, reused or old passwords.
8. Keep your backup file's password safe too — a backup can only be opened with the master password that created it.

SolidPass — Security Without Compromise
Offline & zero-knowledge · Air Microservices LLC
Support: solidpass@airmicroservices.com