Real Application Experience

TotumVault in every screen.

Direct local storage, encrypted document scanner, and authenticated 2FA on desktop, laptop, and mobile.

TotumVault — Unlocked [Local Storage: vault.sqlite]

AES-256 Active

Download TotumVault

Free, local-first, and verified. Select your platform below to download the latest authenticated build.

Looking for previous versions? Browse Legacy Veylock Releases (v1.1.0 & earlier) on GitHub →

Comprehensive Vault

Engineered for security. Designed for simplicity.

TotumVault gives every credential, secret, and physical document a dedicated, cryptographically protected home.

Encrypted Vault

AES-256-GCM authenticated encryption protects every credential payload and document file with unique random nonces.

Password Manager

Store logins, payment cards, server credentials, and notes with custom fields, interactive search, and auto-clearing clipboard.

Documents & Bills

Scan, crop, and store physical bills, receipts, IDs, certificates, and warranties in a multi-page encrypted gallery.

Built-in Authenticator

Offline RFC 6238 TOTP two-factor codes with configurable intervals and hash algorithms directly alongside your accounts.

Password Generator

Cryptographically secure password and passphrase generation powered directly by your operating system CSPRNG.

Security Health Audit

On-device Shannon-entropy scoring instantly detects weak passwords, reused credentials, and accounts missing two-factor security.

Safe Import Wizard

Pre-inspect .vlock and .csv files before disk write with duplicate detection and automatic SQLite physical snapshot rollback.

Local-First Privacy

No cloud servers. No account registration. No telemetry pings. Your encrypted vault stays strictly on your physical devices.

Physical Meets Digital

A dedicated vault for your documents and bills.

Most password managers force you into plain text notes. TotumVault gives your physical papers, receipts, IDs, and cards their own secure visual workflow.

1

Camera & Gallery Capture

Live camera viewfinder with front and back lens toggle, plus instant upload support for JPG, PNG, and WEBP files.

2

4-Corner Perspective Quad Crop

Automatic local contrast edge detection with draggable corner handles to straighten angled receipts and skewed paper edges.

3

Text Clarity & Contrast Filter

On-device document filters maximize contrast and sharpen printed receipts and fine legal print with 90° rotation controls.

4

Multi-Page Carousel & Export

Organize multi-page invoices with thumbnail strips, high-resolution zoom, page reordering, and decrypted JPEG export.

On-Device Document Scanner Interactive Quad Crop

Zero-Knowledge Foundation

Security built on mathematical certainty.

TotumVault does not ask you to trust our cloud servers because we don't operate any. Everything is verified locally.

AES-256-GCM

Authenticated symmetric encryption protects all entries and document images using unique random nonces. Any byte tampering is mathematically detected immediately.

Argon2id KDF

Memory-hard key derivation unwraps your master Vault Encryption Key (VEK). Resistant to GPU, ASIC, and distributed rainbow-table brute-force attacks.

Dual-Layer Rollback

SQLite ACID atomic transactions are combined with automatic physical snapshot backup files on disk to prevent database corruption during vault imports.

Security Property	TotumVault	Cloud Password Managers
Vault Persistence	Strictly local device (SQLite)	Centralized cloud databases
Account Requirement	None (Zero registration)	Mandatory email & subscription
Offline Capability	100% full autonomy	Limited or requires cloud sync
Document & Receipt Vault	Built-in perspective quad crop	Unformatted text or generic attachments
Source Code Transparency	Source-available & auditable (Rust & React)	Frequently proprietary backend
Telemetry & Analytics	Zero tracking or pings	Third-party telemetry & trackers

Verified Releases

Official Releases

Directly compiled, tested, and distributed from GitHub Actions.

Official Project Rebrand Notice (v1.2.0 onwards)

After the v1.1.0 release, we officially changed our application name from Veylock to TotumVault. All active development and releases moving forward are hosted under TotumVault (github.com/RoyalRohan/TotumVault). Older historical releases and codebases remain safely archived under the original Veylock repository (github.com/RoyalRohan/veylock).

Need legacy Veylock release binaries? Access v1.1.0 and prior builds from the original Veylock repository release archive.

Legacy Veylock GitHub Releases →

Changelog

Latest Updates

Detailed record of recent security improvements, features, and platform updates.

v2.0.0 Latest October 3, 2026

Offline Android Document Expiry Notifications: Full background alarms powered by Android AlarmManager and DocumentReminderReceiver with persistent broadcast filters (BOOT_COMPLETED, TIMEZONE_CHANGED, DATE_CHANGED), multi-path vault.sqlite resolution across app data directories, concurrent SQLite WAL mode, and DST-safe countdown timers.
Collision-Aware Dual Calendar System: Bidirectional offline conversion between Gregorian (AD) and Nepali Bikram Sambat (BS) calendars with variable BS month length support, zero horizontal overflow across all viewports (320px–1920px), and integrated expiry tracking across documents, bills, and software licenses.
Application-Level Air-Gap Mode & Network Isolation: Centralized synchronous defense-in-depth gate intercepting all outbound network requests before dispatch, paired with built-in zero-leak verification and real-time state synchronization across desktop and mobile.
Production Cryptographic Automatic Updates: Integrated Tauri 2 in-process updater with Ed25519 Minisign cryptographic signature verification across Windows, Linux, and macOS, complete with interactive progress modal, version-skip control, and seamless restart.
Privacy Screen Shield & Capture Defense: Deep frosted glass overlay (blur(36px)) auto-obscuring the window on blur or minimize. Proactive interception of screenshot shortcuts (PrintScreen, Win+Shift+S, Ctrl+Shift+S, Cmd+Shift+3/4/5, Ctrl+P) with hardware display isolation (WDA_EXCLUDEFROMCAPTURE, Wayland compositor isolation, FLAG_SECURE).
Hardware-Backed Android Biometrics: Native AndroidKeyStore AES-256-GCM hardware key encryption bound to BIOMETRIC_STRONG policy with key invalidation on new biometric enrollment and strict 3-attempt lockout.
Hardened Multi-Tier Secure Clipboard Engine: Concurrency-safe atomic mutex serialization, monotonic generation reservation, Android 13+ EXTRA_IS_SENSITIVE preview suppression, smart overwrite sanitization that purges only copied secrets, and cryptographic HMAC session tracking with ZeroizeOnDrop.
Complete Preferences Redesign: 7 dedicated configuration categories (General, Appearance, Security, Privacy & Network, Documents & Expiry, Data Management, Updates) with desktop sidebar navigation, real-time status badges, and mobile-optimized segmented tabs.
Unified Single Documents Search & Navigation: Authoritative search and filter toolbar with instant keyboard focus (Ctrl+K / ⌘K) and context-aware global header unmounting.
Secure Notes Hide/Reveal Privacy: Eye-toggle visibility button to mask private note text with bullet glyphs (••••••••) while keeping titles legible, with auto-reset upon vault lock.
Software License Dynamic Expiry Engine: Calendar date boundary evaluation (active through 23:59:59 local time) and dynamic categorization into Active, Expires Soon, Expired, and Lifetime / No Expiry sections.
Hierarchical Login Subfolders: Nested folder creation, subfolder renaming, cascade deletion, and instant cross-subfolder filtering.
Curated Typography Selection & Horizontal Pan: Font selector with 5 developer-grade fonts (Inter, Geist Sans, IBM Plex Sans, JetBrains Mono, Fira Code) and horizontal mouse wheel translation.
Cross-Platform Distribution Artifacts: Direct distribution packages for 64-bit Windows installer (.exe), universal macOS DMG (.dmg), universal Linux AppImage, DEB, RPM, Arch Linux (.pkg.tar.zst), and per-architecture Android APKs (universal, aarch64, armv7).

v1.2.0 September 24, 2026

Safe Import with Conflict Resolution: 4-step interactive wizard with duplicate detection (Keep Existing, Import Both, Replace Existing).
Secure Document & Bill Vault: Live camera scanner, on-device perspective quad cropping, 90° rotation, and multi-page carousel viewer.
Dual-Layer Rollback: SQLite transaction safety paired with physical snapshot backup file creation before vault imports.
Cross-Platform Binaries: Official distribution packages for Windows x64, macOS Universal DMG, Linux (DEB, RPM, AppImage, Arch), and Android APKs.

v1.1.0 September 5, 2026

Offline 2FA Authenticator: RFC 6238 TOTP engine supporting custom intervals and SHA algorithms.
Clipboard Security: Configurable countdown timer automatically clearing copied passwords from memory.
Security Health Audit: Shannon-entropy password scoring dashboard identifying weak and reused credentials.
System Theme Sync: Fluid light and dark theme mode synchronization with system preferences.