Keepass2Android Offline

Philipp Crocoll (Croco Apps)

About this app

Keepass2Android is an open source password manager application for Android. It reads and writes .kdbx-files, the database format used by the popular KeePass 2.x Password Safe for Windows and other desktop operating systems.

This implementation uses the original KeePass libraries for Windows to handle file access to ensure file format compatibility.

Main features of the App are

* read/write support for .kdbx (KeePass 2.x) files
* integrates with nearly every Android browser (see below)
* QuickUnlock: Unlock your database once with your full password, re-open it by typing just a few characters (see below)
* Integrated Soft-Keyboard: Switch to this keyboard for entering user credentials. This shields you from clipboard based password sniffers (see below)
* support for editing entries including additional string fields, file attachments, tags etc.
* Note: please install Keepass2Android (non offline version) if you want to open files directly from a webserver (FTP/WebDAV) or the cloud (e.g. Google Drive, Dropbox, pCloud etc.).
* search dialog with all search options from KeePass 2.x.

Bug reports and suggestions: https://github.com/PhilippC/keepass2android/

== Browser integration ==
If you need to lookup a password for a webpage, go to Menu/Share... and select Keepass2Android. This will
* bring up a screen to load/unlock a database if no database is loaded and unlocked
* go to the Search Results screen displaying all entries for the currently visited URL
- or -
* directly offer the Copy Username/Password notifications if exactly one entry matches the currently visited URL

== QuickUnlock ==
You should protect your password database with a strong (i.e. random and LONG) password including upper and lower case as well as numbers and special characters. Typing such a password on a mobile phone every time you unlock your database is time-consuming and error-prone. The KP2A solution is QuickUnlock:
* Use a strong password for your database
* Load your database and type the strong password once. Enable QuickUnlock.
* The application is locked after the time specified in the settings
* If you want to re-open your database, you can type just a few characters (by default, the last 3 characters of your password) to unlock quickly and easily!
* If the wrong QuickUnlock key is entered, the database is locked and the full password is required to re-open.

Is this safe? First: it allows you to use a really strong password, this increases safety in case someone gets your database file. Second: If you loose your phone and someone tries to open the password database, the attacker has exactly one chance to make use of QuickUnlock. When using 3 characters and assuming 70 characters in the set of possible characters, the attacker has a 0.0003% chance of opening the file. If this sounds still too much for you, choose 4 or more characters in the settings.

QuickUnlock requires an icon in the notification area. This is because Android would kill Keepass2Android too often without this icon. It does not require battery power.

== Keepass2Android Keyboard ==
A German research team has demonstrated that clipboard-based access of credentials as used by most Android password managers is not safe: Every app on your phone can register for changes of the clipboard and thus be notified when you copy your passwords from the password manager to your clipboard. In order to protect against this kind of attack, you should use the Keepass2Android keyboard: When you select an entry, a notification will appear in the notification bar. This notification lets you switch to the KP2A keyboard. ON this keyboard, click the KP2A symbol to "type" your credentials. Click the keyboard key to switch back to your favorite keyboard.

Ratings and reviews

This is a great application for everyone that values security. I prefer the "offline" version of as I don't want to shuffle my databases through dropbox, google drive or other services. The auto fill features work great and make filling in credentials a breeze. A tool like SyncThing is a great way to keep the database in sync between multiple machines. This lets me make changes on the go and know that everything will be synced at home as well. Consider donating if you use this application! It's by far the best of those I've tested. Please keep this up to date! I see that it hasn't been updated since October 2019.

Major annoyance with recent builds Used this app for years, but it started reliably crashing after recent changes to AutoFill. Saw notice of the changes(mandatory changes from Google IIRC), but assumed it would juat be a lost feature. Took a while to realize it was the cause of my crashes and app won't let me turn it off (stuck as "Enabled"). Eventually gave in and installed the AutoFill APK directly from GH and crashes stopped, but I still can't turn off the integration.

Love this app. Been using it for the longest time. Would like to make one suggestion. Occasionally, I open the app and it pops up a message lasting a few seconds, which partially covers the keyboard at the bottom of the screen, preventing me from seeing the keyboard to type in the password. Can you change the location of the popup to the middle or top?

What's new

Upgraded from Xamarin Android to .net 8
Upgraded to Target SDK 34
Upgraded to Material 3 user interface
Improve autofill to work with Compose apps
Fix hostname matching in autofill and search
Fix issue with password generator