🔒
NATIVE SECURITY ENCLAVE

Hardware-Hardened App Lock Engine

C++17 CoreAndroid 16 (Baklava)Kotlin Multi-ModuleJNI Bridge

RootLock protects your sensitive banking, message, and authentication applications with isolated credentials. Powered by an offline native C++ PBKDF2 cryptography engine, it verifies access credentials locally, keeping your master pins safely zeroed out of system memory.

The Security Verification Cycle
01

App Launch

Foreground service intercepts launch context

→
02

Prompt Overlay

Displays glassmorphic credentials pad

→
03

JNI Bridge

Kotlin transfers candidate keys to C++ heap

→
04

PBKDF2 Compute

Hardened cryptography verify checks hash

→
05

Memory Purge

Sensitive buffers are instantly zeroed and freed

Engineered Protections
🛡️

Hardened Cryptography Core

  • Native Verifier: Full PBKDF2-HMAC-SHA512 verification lives inside isolated C++17 JNI.
  • Memory Hygiene: Secrets copy directly into `mlock`-ed buffers, zeroed on free to prevent heap dumps.
  • Independent Salts: Unique 16-byte random salts per locked app to stop side-channel attacks.
  • Self-Diagnostics: Performs automated engine self-tests on every device boot.
⏱️

Graduated Lockout Policy

  • Anti-Brute Force: Access is frozen for 30 seconds after 3 failed password attempts.
  • Graduated Scale: Cooldown expands to 60 seconds at 5 failures, and 5 minutes at 10.
  • System Intruder Capture: Declares failure callbacks for third-party camera snapping modules.
  • Decoy Pins: Input decoy passwords to unlock dummy mock app layouts.
🎨

Material 3 & Glassmorphism

  • Dynamic Styling: System-wide compatibility with Android Material You dynamic palettes.
  • Immersive Overlay: Luxurious frosted glass overlay hides application backdrops in real-time.
  • 7 Built-in Themes: Switch between Light, Dark, Sepia, Emerald, Indigo, and OLED black.
  • Spring Motion: Interactive feedback utilizes highly polished, native spring-physics animations.
📊

Privately Logged Statistics

  • Local Database: Verification audits are compiled strictly inside offline room sandboxes.
  • Interactive Charts: Visualizes daily summaries, failed locks, and app opened ratios.
  • Score Engine: Generates a cumulative privacy health score of your device app locks.
  • No Network Sync: Lock records are never transmitted outside your physical hardware.
Technical Specifications

Android Environment

ComponentDetail
Target platformAndroid Platform 36 (Baklava / 16)
Minimum SDKAPI 26 (Android 8.0)
PresentationJetpack Compose & Material 3
Memory management16 KB Page-aligned loader layout

Security Specs

SpecificationDetail
Native CoreC++17 compiler via Android NDK & CMake
PrimitivesPBKDF2-HMAC-SHA512 (100,000 iterations)
Salt allocation16-Byte cryptographically secure random bytes
DatabaseRoom local SQLite with hardware master keys
RootLock — Frequently Asked Questions

What is RootLock (Root Lock) by RebelRoot?

−

RootLock (also known as Root Lock or RebelRoot RootLock) is a premium, privacy-first per-app locker for Android developed by RebelRoot. Unlike standard app lockers, each app gets its own isolated credential (PIN, password, pattern, or biometric) protected by a hardened native C++ PBKDF2 security core.

How is RootLock different from other Android app lockers?

+

Is RootLock free and open source?

+
Join the RebelRoot Community. Let's Build Better Software Together.
REBELROOT Logo

Independent, developer-led collective dedicated to privacy-first, zero-surveillance digital software tools.

© Copyright 2026 RebelRoot. All rights reserved.