LockHarbor
No, and not as a promise — as a matter of design. There is no LockHarbor server and no account. Your vault is an encrypted file on your phone. We have no copy of it and no way to obtain one.
Your recovery key — shown once when you set up the app — lets you set a new master password. If you have neither the master password nor the recovery key, and no backup file, the vault cannot be opened by anyone, including us. There is no reset link, because there is nothing to send one from.
If you have an encrypted backup, install LockHarbor on the new phone and restore from it. If you have no backup, your entries are gone. This is the direct cost of nothing being stored on a server, and it is the single best reason to take a backup today.
Not yet. Your vault lives on one phone. Moving to another device means taking an encrypted backup and restoring it there. Sync is planned but deliberately last, because it is the feature that would introduce a server.
Completely. You can use LockHarbor in airplane mode indefinitely. Two things can use the internet and both are your choice: the optional breach check, which is off until you enable it, and buying or restoring LockHarbor Pro. Neither can see your vault, and if you do neither, no request is ever made.
The iPhone version is built and has been submitted to the App Store — it is waiting on Apple’s review. Filling passwords on iOS works through a different mechanism from Android’s, so it had to be built separately rather than ported.
Almost always the browser's own setting. Choosing LockHarbor in Android's settings is not enough for most browsers — in Chrome you also need ⋮ → Settings → Autofill services → Autofill using another service. Firefox needs nothing extra.
Samsung Internet will not work at all yet, whatever you configure — it asks a newer part of Android that LockHarbor does not answer yet. Use Chrome or Firefox.
A quick test: if filling works in an ordinary app but never in the browser, it is the browser.
Matching runs on the website address stored against the entry. If it has none, or it does not match the site asking, it is not offered — even if the name looks right. Open the entry and add the address. LockHarbor deliberately never offers a password it cannot tie to whoever is asking, and treats a look-alike address as a different site.
No. It uses well-established, published cryptography (Argon2id and XChaCha20-Poly1305) through maintained libraries rather than anything home-made, and the protocol is documented. But no external party has reviewed it, and we will not describe it as audited or "military grade" until that is actually true.
No. Card scanning reads the number, expiry and cardholder name only. The security code is always typed by you.
No. The camera image is read for the fields and discarded immediately. Nothing is written to your photo library and nothing is uploaded.
A driver's licence is read from a barcode and is very reliable. Cards and passports are read from printed text, which is inherently less certain — a field can come back blank or slightly wrong. Embossed cards with raised numbers are the hardest. Always check what was filled before saving.
The machine-readable lines separate given names with a single character that the camera occasionally misreads or loses, which merges the names into one. It fills about two thirds of the time on a clean scan. Rescanning often works; typing it takes two seconds.
Yes, two ways: an encrypted backup, or a plain-text CSV/JSON export for moving to another manager. The plain-text one is unprotected by definition, so it warns you and asks for your master password first.
No ads and no trackers, ever. The app is free and complete on its own — you can store as much as you like without paying. LockHarbor Pro is an optional upgrade that adds autofill, the security detail, document scanning, reminders and picture icons; it is a monthly or yearly subscription, or a single payment that keeps it for good.
Yes, but it is off by default — screenshots work normally until you choose otherwise. Turning on Settings → Privacy → Block screenshots stops screenshots, screen recording and screen sharing, and hides the app in the app switcher. Worth switching on if you are ever somewhere your screen could be captured without you noticing.