SplitPass

An Expo / React Native app for handling high-value secrets without relying on a single storage location. It keeps a password, a payment card or a BIP39 seed phrase in a vault encrypted with a master passphrase, and can split a secret into shards that travel as QR codes or NFC tags and recombine later. A browser extension scans SplitPass QR codes and fills the saved passwords.

v1.4.24 · Expo SDK 55 · browser extension 0.1.0.

• Stores passwords, payment cards and seed phrases locally, detecting seed phrases automatically.
• Splits secrets into shards for external storage and recovers them from QR or NFC.
• Encrypts the vault and every backup with the master passphrase; there is no recovery if it is lost.
• Exports and imports backups as opaque archive files.
• Generates passwords, schedules reminders and unlocks with biometrics when the device allows it.
• The extension (Chrome, Brave, Safari) keeps encrypted passwords per domain and fills them from a site panel.

How each of these works, and the security contracts behind them, is in SPEC.md.

Develop

Requires the Node version in .nvmrc and Yarn 1.x.

yarn install
yarn start                # Expo dev client
yarn android              # or: yarn ios · yarn web
yarn test                 # Jest
yarn check:release        # package.json, app.json and build numbers agree
npx expo-doctor           # after dependency or Expo config changes

Build

yarn build:local:dev      # dev build installed on the device or emulator
yarn build:local:prod     # signed APK in release-assets/
yarn build:dev            # the same dev build on EAS cloud
yarn build:prod           # the same signed APK on EAS cloud
yarn build:local:store    # signed AAB for Google Play in release-assets/
yarn build:store          # the same AAB on EAS cloud

Store assets live in store-assets/; SPEC section 10 describes the release steps.

Browser extension

browser-extension/ loads unpacked in Chrome and Brave and converts for Safari. Setup, retention and camera notes are in browser-extension/README.md.

Site

site/ holds the one-page product site. yarn site:build writes it to site/dist/; serve that folder with any static server. Store URLs and the canonical URL come from APP_STORE_URL, PLAY_STORE_URL and SITE_URL; SPEC 10.9 has the rest.

Documents

• SPEC.md — how SplitPass works: secret model, security, storage, screens, services, extension, operations, design system.
• ROADMAP.md — what is left and who has to move.
• CHANGELOG.md — what each version shipped.
• AGENTS.md — rules for working on the repository.
• Design kit: design/index.html (system), browser-extension.html (extension), mobile.html (app), proposals.html (visual proposals); yarn design regenerates it, and design/AGENTS.md is its contract.