XVault v1.0.0

XVault v1.0 — Initial Secure Release

What’s Included

• Fully offline, device-only vault for storing card metadata (credit, debit, prepaid)
• Hardware-backed encryption using Android Keystore (AES-256 / GCM)
• Biometric-protected vault access (fingerprint / device biometrics)
• Master Vault Key (MVK) architecture with in-memory lifecycle control
• Encrypted recovery mechanism using security questions
• Anti-theft protections (biometric changes, device state changes trigger vault lock)
• Automatic vault locking on inactivity and app backgrounding
• Secure clipboard handling and data integrity verification
• Modern UI built with Jetpack Compose

Security Highlights

• No cloud, no sync, no network access
• No full card numbers or CVV storage
• Vault data encrypted at rest and protected at runtime
• Hardware-backed key invalidation on biometric changes
• Tamper detection using cryptographic checksums

Notes

• This is an initial release intended for learning, research, and personal use
• Not certified for financial compliance (e.g. PCI-DSS)