Bank cards, loyalty cards and documents, encrypted on your phone. The app has no permission to go online.
Your cards drop into one stack
Cards and documents lie in a stack, the way they do in the app. Each one shows its name; tap a strip to open it.
Cardico reads the card number, expiry date and name from a photo. Text recognition runs on the phone, so the picture never leaves it.
Scan a card with the camera or pick a screenshot from the gallery. Cardico stores the code exactly as printed and redraws QR and linear codes so a scanner reads them first time.
Black out what the hotel does not need: the number, the photo, the signature. Write who the copy is for. That line and today's date run across the whole page, so a cropped corner still carries them.
Save every card, document and page photo into one encrypted file, in a folder you choose. Cardico shows a 20-character code once. Write it on paper: the app keeps no copy, and without it nobody can open the file, you included.
Every card shows a strip with its name and menu. The next one covers the rest, and the last lies open. One screen shows seven to nine names instead of three cards. Hold and drag a strip to reorder.
Tap the question mark beside a feature. A drawn phone plays the steps in a loop and a caption explains each one. The clips are built from the app's own interface, so they stay small and translate with the rest of the text.
A border check, a robbery, a jealous partner. Cardico gives you a second wallet to show and a PIN that destroys the real one. From outside, each looks like a normal unlock.
Unlock Cardico
Demo PINs for this page. In the app you choose your own four digits.
Settings look the same in both wallets, so nothing on screen tells which PIN opened the app. A correct PIN does not reset the count of wrong tries.
A second store with its own 6-digit code. Its contents live inside a file of random bytes that every install carries from the first launch, filled or not.
Planned for a future version: the duress PIN quietly tells a person you trust that someone forced you to open Cardico.
The phone's own hardware does the heavy lifting. Copying the app's files to another device gets an attacker nothing.
Cardico stores cards and shows their numbers and codes. It is not a contactless payment app.
On Android 8.0 and later every PIN guess passes through the phone's secure chip. The iPhone beta keeps the key in the Keychain and counts the rounds in the app; a Secure Enclave version is not built yet.
On a rooted phone the pause between wrong tries can be skipped. Each guess still has to pass through the hardware key on that phone. Cardico warns you in Settings if it sees signs of root.
Lose the phone without a backup file and its code, and the data is gone. That is the cost of keeping it on one device.
In the app's private storage on your phone, encrypted. The app has no internet permission and Android cloud backup is off, so there is no server copy anywhere.
To photograph a card or a document page and read the number or barcode. Recognition runs on the phone. You can also pick an image from the gallery instead.
Nobody can reset it, Cardico included. Restore from your backup file with its code on a fresh install. Without both, the data stays locked.
Not from the screen: both wallets look and work the same, and settings do not change between them. Someone who reads the database file with root can see that some rows are not readable by the open wallet, but not whether they belong to one wallet or two.
Write to me through the contact page with the email of your Google or Apple account. Android testers install Cardico from Google Play, iPhone testers from TestFlight.
English and Russian, including the in-app clips.
Testers install it from Google Play on Android and from TestFlight on iPhone. Send me the email of your Google or Apple account to join.
Version 1.3.2 · Android 8.0 and later through Google Play testing · iPhone through TestFlight