How We Built a Breezy Password Manager and Brought It Up To a Digital ID Manager On Steroids

Description

Pocket Safe and Truster are two sibling password manager apps. While created to solve the same problem — storing sensitive data on a smartphone — they differ in terms of functionality and scope.

Pocket Safe

Pocket Safe is a basic password manager that helps people log in to their favorite services using a Master Password.

Technologies

Node.JS, Express, MySQL, Mailgun, JWT Auth, REST API, Swift

Our role and company services

UI/UX Design, Mobile Development, Backend, QA

Truster

Truster, the next iteration of Pocket Safe, is a sophisticated data storage vault that people can trust with their most confidential information, such as credit cards, private notes, and personal IDs.

Backend

TypeScript, VSCode, Jetbrains Webstorm, Jetbrains DataGrip, HeidiSQL

Frontend

Nest.js (Node.js/Express), TypeORM, Docker

Database

Postgres

Our role and company services

UI/UX Design, Mobile Development, Backend, QA

The retrospective

The founder first approached us in March 2020 with an idea to create an uncluttered password manager app for logging into websites with a single sign-on solution. We created the MVP that was later released under the name Pocket Safe.

The app was well-received by the public, so it was decided to further develop the project — this time with wider functionality and even more advanced encryption algorithms. Truster — for that was the name of the second MVP — was supposed to be extra-secure to allow users to store such sensitive data as credit card details, documents, etc.

Pocket Safe

iteration 1

Description

First, the team was summoned to create an uncluttered password manager mobile application for logging into various websites.

Our devs were challenged to architect the UX and fill it with UI elements according to the Apple guidelines, connect the frontend and the backend, test the thing, and deliver it to the client market-ready.

The solution

We created an app that grants access to multiple passwords under an extra-secure Master Password. We developed a minimalistic UI/UX to avert unnecessary user actions. To protect the data, the app communicates with the database through the secure Rest API.

Functionality

The library of the most popular services was preinstalled for a comfier search.

For extra security, we enabled a 4-digit PIN code lock and an auto-lock timer. The latter blocks the app after a specified period of inactivity.

We implemented in-app subscription purchase with a 3-day free trial.

Users can auto-login to their favorite websites, change passwords right from the app, organize them into groups, and share account access with multiple people.

Results

The end product is a straightforward mobile solution that increases productivity and decreases the likelihood of password-related breaches.

Pocket Safe is translated into 32 languages and currently available in Europe, Asia, and the Middle East.

In just a month, we managed to build the app from scratch — on time, on budget.

Truster

iteration 2

Description

After the success of Pocket Safe, the founder reached us again — this time to create an extra secure password manager to promote in the US market.

Unlike basic analogs, Truster had to be secure enough to store not just the website login information but also credit card data, personal documentation, and notes.

The biggest challenge was to sync complex encryption solutions with the backend while complying with the legal requirements associated with data storage. The project required a branched internal logic and a legal research job, including GDPR compliance.

The solution

We took into account the experience of creating a basic password manager to design a more complex application for storing data that needs special protection.

Functionality

The ability to sync and access data across devices.

The app stores items in categories: website login credentials, bank card details, personal documents (passport, driver's license, etc.), and secure notes.

Users can create multiple accounts on the same device.

Additional functionality upon paid subscription: instant login with Face ID, Touch ID, or PIN code, ad blocker, password generator, and the unlimited amount of data to store.

The ability to share items with teammates and family members.

The app works in offline mode. All data that was created on other devices in offline mode will be pulled to the account immediately upon login.

Start your project

Tell us what you're building, and we'll help you find the fastest path from idea to launch.

Book a discovery call

Encryption

The password is used only to obtain an encryption key. It is also not transmitted to the server and is stored on the device in the encrypted form.

We used the AES 256 block cipher algorithm that uses symmetric key encryption. It involves the use of only one secret key to cipher and decipher the information.

All data is transferred via the TLS/SSL secure protocol.

The password is not stored either on the server or on devices. All the records are encrypted and decrypted on the user's device. Neither decrypted data nor even the encryption keys can be accessed — this information belongs only to the user.

The data is backed by an extra-secure Master Password.

This set of measures reduces the likelihood of unauthorized access to zero, even if the phone is lost or stolen.

Real results from real customers

Most of all I liked the fact that the team quickly solved all difficulties, offered us many solutions in various situations, shared expertise. And of course the quality of the code!

Kseniya Prilutskaya

Head of Mobile App Development, Rich Peach Media

Results

On the basis of Pocket Safe, in 3 months we created an MVP with advanced data storage capabilities.

Our team built a powerful encrypted vault with complex inner logic. Wrapped in a minimalistic design, Truster makes a great one-fits-all data security solution for everyday use.

Manual testing was performed to fix the bugs and make sure the app is market-ready.

See more cases

EasySpk

AI / Productivity · mobile app

EasySpk is an iPhone keyboard that turns speech into clean, ready-to-send text in any app. We came up with the name, designed the brand, the app and the landing page, built the AI part and shipped the first release in 2 weeks. It got 1,000+ downloads in its first days.

GhostMinutes

AI / Productivity · web and mobile app

GhostMinutes turns meetings and calls into text and AI summaries. We built it from scratch for a serial founder: the name, the brand, an iOS app in 2 weeks, a web app 1 week later and the speech AI behind both. The product reached $1,500 MRR.

IPOPBOOKS

FinTech / AI · web app

IPOPBOOKS does the books for small US businesses: AI sorts every bank transaction and a bookkeeper checks it. We built the client portal, the bookkeeper workspace, the admin panel and the website, and launched in 10 weeks, ready to take payments.

HealthyNikah

Social / Lifestyle · mobile app

HealthyNikah helps Muslims in the UK find a husband or wife, with family involved and photos kept private. We rewrote the old app in Flutter, rebuilt billing, moved 3,200+ members over and took the app through Apple review to a relaunch on iOS and Android.

Traza

Marketplace / Lifestyle · mobile app

Traza is an Australian marketplace for tattoo artists. Its team had the web product, the API and the designs, but no mobile developers. Our React Native team built the artist app on top of what they had and got it approved on the App Store and Google Play. It went live in early 2026.

Koncierge

FinTech · web app

Koncierge connects a payment provider, FX brokers and licensed local agents in Japan through one API, a portal for each role and an embeddable checkout widget. We modeled the data, built the payment matching engine and the portals, and took it live.

Volumetryx

HealthTech · web app

Volumetryx links drug companies, hospitals and scan readers in cancer trials. We built a clickable demo of its platform: trial setup, uploads of large scan files, a browser scan viewer and progress dashboards. The two hardest technical questions were answered before the main build.

Subflare

AI / MarTech · web app

Subflare shows B2B teams what a visitor did on their website before filling in a form, and how ready they are to buy. We tested the risky AI part in 2 weeks, then built the tracking script, AI scoring, dashboards and admin panel.

Start your project

Tell us what you're building, and we'll help you find the fastest path from idea to launch.

Book a discovery call

Talk to us!

Send us a message and we'll get in touch with you as soon as we can.