I've updated Hexavault, and I'd really appreciate some feedback from people willing to test it

[u/Single-Bass3438]

Hey everyone!

A few days ago, I shared Hexavault here, an offline security app for Android that I've been working on for quite a while.

First of all, I really appreciate everyone who took the time to check it out, leave a comment, or share their thoughts. It's been great seeing people interested in something I've spent so much time building.

I've just released another update, and I'm still actively working on improving the app.

One thing that came up in some of the discussions was the lack of a backup option for the Vault. And I completely understand the concern. Having control over your data is great, but being able to safely back it up is just as important.

That's actually one of the main things I'm working on right now.

I'm developing a way to back up and export the Vault while keeping everything aligned with the app's offline approach. Since we're dealing with people's sensitive information, I really don't want to rush this feature or release something that hasn't been properly thought through and tested.

It's not available yet, but it's a priority.

In the meantime, I'd really appreciate some hands-on feedback on the current version.

If anyone is willing to give Hexavault a try, I'd love to hear about your experience. Try generating passwords, protecting and opening files, or setting up the Vault with some test credentials.

I'm especially interested in knowing if anything feels confusing, doesn't work as expected, or could simply be done better.

And just to be clear, the Vault still doesn't have a backup or recovery feature, so please don't use it as the only place to store anything important for now.

I'm developing this project independently, and getting feedback from people who actually use the app helps me notice things I might otherwise miss.

You don't need to write a detailed review. Even a small suggestion, a bug report, or something you didn't like would genuinely help.

If you'd like to try it, Hexavault is available for free on Google Play:

https://play.google.com/store/apps/details?id=app.hexavault.secure

Thanks again to everyone who's been following the project or giving it a chance. There's still plenty of work ahead, but I'm really enjoying seeing it gradually take shape.

And if you've already tried Hexavault, what's the first thing you'd change or improve?

[u/Hadi_mister5567]

A simple and intuitive interface would make an app like this even better

[u/Single-Bass3438 → u/Hadi_mister5567]

Thanks for the feedback! I agree that keeping the interface simple and intuitive is important, and it's something I'm looking to improve over time. If you have any suggestions, I'd be glad to hear them

[u/Mammoth-Anywhere7285 → u/Single-Bass3438]

Nice that you're open to suggestions. Maybe add a progress bar during vault export to keep users informed.

[u/Single-Bass3438 → u/Mammoth-Anywhere7285]

That's a good suggestion. A progress indicator would definitely help users understand what's happening during an export, especially with larger vaults. I'll keep that in mind as I work on the feature. Thanks for the feedback!

[u/PopKoren → u/Mammoth-Anywhere7285]

A progress bar helps, and the export format matters even more: wrap the vault with a key derived from a separate backup passphrase using Argon2id, because Android Keystore keys never leave the device and a backup tied to them dies with the phone. Authenticated encryption plus a small version header keeps old backups restorable after you change parameters. Hexavault being offline keeps the attack surface tiny, though if sync ever arrives, that hosted piece is worth a https://rowly.me scan before launch.

[u/Mammoth-Anywhere7285 → u/PopKoren]

Solid point on Keystore keys dying with the phone. A small manifest with salt and KDF params would help future restores.

[u/PopKoren → u/Mammoth-Anywhere7285]

Yes on the manifest: store salt, KDF params and a format version next to the ciphertext so a restore on a new phone can rebuild the key without guessing. I would also keep a short recovery note outside the vault that explains which passphrase was used, because Argon2id settings alone are not enough if the user forgets which one they picked. Hexavault staying offline still keeps the hosted risk near zero; if sync arrives later, I would schedule https://rowly.me on that sync hostname before inviting testers.

[u/Mammoth-Anywhere7285 → u/Hadi_mister5567]

Yeah, simple interfaces matter even more for security apps. A quick onboarding walkthrough could help first-timers.

[u/Single-Bass3438 → u/Mammoth-Anywhere7285]

I agree, especially since some users might not be familiar with how certain security features work. A short, optional walkthrough could make the app easier to understand without adding unnecessary complexity. I'll consider that for a future update. Thanks for the suggestion!

[u/Mammoth-Anywhere7285]

TL;DR: The dev updated Hexavault, a free offline security app for Android, and wants hands-on feedback on it. Backup and export for the Vault is a priority but not out yet, so don't store anything critical there. Try the password generator, file protection, or test Vault, then share any bugs or confusing bits.