Your Private Vault
Store logins, passwords, and form credentials directly in an encrypted database on your device, unlocked by your fingerprint or screen lock.
No software is invulnerable or "military-grade unhackable." We explicitly advise users that browser-stored credentials are meant for convenient daily web authentication. If your physical phone is rooted, compromised by root-level malware, or unlocked by an unauthorized party, local storage can theoretically be targeted. For high-value master keys or financial seed phrases, we recommend dedicated hardware security keys.
Biometric Unlock
Autofill prompts require device fingerprint or biometric facial authentication before decrypting credentials into page forms.
Zero Default Cloud
Passwords stay stored in an isolated, encrypted SQLite database on your device filesystem. They are never transmitted to Nirvana servers.
Breach Alert Checks
Local k-anonymity hashing lets you check if saved passwords have appeared in known public breach datasets without leaking plaintext credentials.
Cryptographic Architecture
Under the hood, Nirvana leverages the standard Mozilla Firefox Login Manager framework built into GeckoView, backed by Android Keystore hardware-backed encryption keys where supported by your device SoC.
When optional synchronization is enabled in future releases via end-to-end encrypted Firefox Sync protocols, encryption keys are derived on your device using PBKDF2 with SHA-256 before any payload leaves your hardware.