sas101 / pass-android

Android password manager app compatible with pass, the standard unix password manager.

Hi there 👋

pass-android's Issues

Built-in keyboard for passphrase entry

Do you really think this is necessary? At least in the first instance?

The status quo is that, when entering passwords, I have to trust my keyboard and my app (which may be a browser). I'd say it's enough to be at least that secure. Again, at least in the first instance.

Import & Update passwords

For my own needs, importing with git clone and git pull over ssh is enough.

Identify main use-case(s)

This will make selecting and prioritizing the project requirements easier.
Related article

Secure Copy and Paste

I don't really have anything useful to add right now. But this is a big issue, so here's an "issue" to which others can contribute...

How to install?

I'm very interested in this, how do I install it?

Secure password storage

Is this really necessary? Is it not enough just to clone the git repository into the app's private data storage /data/data/...? There, it can't be read by other apps, unless they're running as root.

Think about it. That's way more protection than you get on a Linux desktop, say, where every application you run under your own account can read your private keys.

Use gnupg

I used ssh, git and gpg from the "zshaolin" project. They worked fine. It's not such a big deal cross compiling with the Android NDK.

Decide on a license

The license will determine a lot in terms of freedoms, landscape of the contributors and users that will find use for the application.

For reference:

• pass: GPL v2 and later
• gnupg for android: GPL v3 and later
• openpgp-keychain: GPL v3

While I would recommend GPL either way, using significant code from a GPL project requires you to use GPL as well. Side-by-side installations (for example if you use androids intents instead of adopting the code) do not require this.