DeltaSync

⚠ REQUIRES YOUR OWN SERVER. DeltaSync does nothing on its own. You must first

install and run the self-hosted DeltaSync server (PHP + PostgreSQL), or have

access to someone else's, and enrol this device against it. There is no public

or default server — without one, this app has nothing to sync and cannot even

be set up. If you just want a standalone KeePass app, this is not it: use

KeePass2Android or KeePassDX instead.

DeltaSync keeps a KeePass (.kdbx) database synchronised across your devices

through a server that only ever sees encrypted blobs. Your master password

never leaves the device, and the server cannot read entry titles, usernames,

passwords, notes or attachments — even if it is compromised.

How it differs from other KeePass sync solutions:

• Entry-level deltas: only changed entries cross the wire, not the whole

.kdbx file. Fewer bytes uploaded, fewer wholesale conflicts.

• Real end-to-end encryption: per-entry XChaCha20-Poly1305 with a key

derived from your master password via Argon2id and HKDF-SHA256. The

server stores opaque ciphertext.

• Concurrent edits merge: two devices editing different entries (or even

different fields of the same entry) merge cleanly. Field-level

last-writer-wins on conflicts.

• Multi-user sharing without key escrow: NaCl sealed-box wraps the