Password Manager

Sentinel Lens is a facial recognition surveillance app that uses your Android device's camera to record video in the background (with no live preview) and sends Telegram alerts when unauthorized individuals are detected, based on a configurable blacklist and whitelist. Key Features Background Recording Discreet Capture: Record video silently in the background without any visible camera preview. Saved Camera Footage: Automatically store recordings for later review. Front or Back Camera: Choose either camera lens for optimal coverage. Advanced Facial Recognition Facial Recognition Surveillance: Analyze recorded frames to identify known and unknown faces. Configurable Watchlist: Maintain custom blacklist and whitelist entries to control alerts. Real-Time Alerts Telegram Alert Integration: Send instant notifications via Telegram when a watchlist match is detected.

Tiny app to enforce security policies of your device. It can: * limit the maximum number of failed password attempts * disable USB data connections (Android 12, USB HAL 1.3, Device Owner) * disable safe boot mode (Android 7, Device Owner) * notify on failed password attempt * notify when an app without Internet permission got it after an update Be aware that the app may not work in safe mode. Permissions: * DEVICE_ADMIN - limit the maximum number of failed password attempts * DEVICE_OWNER - disable USB data connections * NOTIFICATION_LISTENER - receive lock/package events * QUERY_ALL_PACKAGES - receive all package events It is Free Open Source Software. License: GPL-3

Shared Haven is a Bitcoin wallet focused on privacy, security, and advanced shared custody. It supports: - Multisig shared wallets - Various timelock configurations (absolute and relative) - Secure local key management - No cloud backups or tracking Ideal for users who want collaborative Bitcoin custody setups, time-locked transactions, or enhanced personal security. Shared Haven is fully open source and designed for those who value security and control over convenience.

Shelter is a Free and Open-Source (FOSS) app that leverages the "Work Profile" feature of Android to provide an isolated space that you can install or clone apps into. For a full description, please read from the Git repository of Shelter. A summary is provided below. The main use-cases of Shelter include: - Installing apps inside a work profile for isolation - "Freeze" apps inside the work profile to prevent them from running or being woken up when you are not actively using them - Installing two copies of the same app on the same device Note that Shelter depends on the Work Profile feature of the Android system, so any bugs related to Work Profiles in the Android-derived system you are using will affect Shelter. In addition, Shelter can only be as secure as the Work Profile implementation.

Android app that intercepts social media URLs and redirects them to alternative frontends while removing tracking parameters. No apps or accounts needed to access the content shared with you. Alternative Frontends Bypass closed ecosystems and access a more open internet - with a less cluttered web experience. Sidestep supports several major platforms with configurable alternatives: Twitter/X → Nitter Reddit → Redlib YouTube → Invidious, Piped Google Maps → OpenStreetMap IMDb → LibreMDB Medium → Scribe Wikipedia → Wikiless Goodreads → BiblioReads Genius → Dumb, Intellectual Tumblr → Priviblur UrbanDictionary → RuralDictionary Imgur → Rimgo GitHub → GotHub StackOverflow → AnonymousOverflow Flexible Configuration & Smart URL Cleaning Automatically removes tracking parameters from all URLs: UTM parameters (utm_source, utm_medium, etc.) Platform-specific trackers (Twitter s/t, YouTube si, Instagram igsh) E-commerce tracking (Amazon, affiliate links) Analytics parameters Granular control over how URLs are processed: Unshorten URLs: Automatically resolves shortened links (bit.ly, t.co, etc.) Remove Tracking: Strip analytics and tracking parameters Immediate Navigation: Automatically open the processed URL in your browser Clean Only Mode: Remove tracking without redirecting Clean & Sidestep Mode: Remove tracking AND redirect to alternative frontend Custom Redirects: Add your own domain mappings Instance Picker: Fetch live, healthy instances sorted by uptime Tracking-proof Previews fetched via DuckDuckGo (optional) No Data Collection: Zero analytics, zero tracking Local Processing: All URL cleaning happens on-device

Sigil is an open-source, advanced encryption utility built for defense-in-depth and memory safety. Unlike standard tools that rely on a single algorithm, Sigil employs a multi-layered, configurable architecture to ensure your data remains secure against sophisticated cryptanalysis.The application operates entirely offline, performing all cryptographic operations locally on your device with a modern Material 3 interface that balances high-level security with usability.Core Security FeaturesEncryption Profiles: Customize your security posture. Switch between "Standard AES-GCM" (Raw mode) for compatibility with external tools, or the "Sigil Chain" for maximum defense.Multi-Layer Cascade: The default Sigil Chain wraps your data in a hybrid cascade of XChaCha20-Poly1305 + Serpent-CBC + Twofish-CBC + AES-256-GCM. This defense-in-depth approach ensures that even if one algorithm is compromised, your data remains protected by independent layers.Zero-Knowledge Auth: Secure the app with a numeric PIN or a strong alphanumeric Password. Credentials are hashed using Salted Argon2id and never stored in a reversible format.Hardware-Backed Vault: When supported by the device, master keys are generated and stored in the Android Keystore (or StrongBox). Saved encryption passwords never touch the disk in plaintext.Memory Hygiene: Sensitive data buffers are zeroed where possible after use to reduce exposure to memory dumps.Privacy & System HardeningScreen Security: Prevents screenshots and hides app content in the "Recent Apps" overview using FLAG_SECURE, protecting against visual snooping and malicious screen recorders.Clipboard Protection: Automatic wipe timers and Android 13+ sensitive content flags prevent clipboard managers from retaining your decrypted data.Offline-Only: Sigil does not request the INTERNET permission. It tracks no analytics, collects no telemetry, and stores no data on external servers.Advanced User ToolkitSecure Keystore: Save, view, and manage encryption keys using the hardware-backed vault.Custom Encryption Control: Full manual control over encryption chains. Build your own cascade from 18 algorithms, reorder layers, and toggle ZLib compression.System Console: Real-time logging of the encryption process, providing precise timing metrics and error diagnostics.Advanced Theming: Material You Dynamic Colors, Dark/Light modes, and a custom HSV color engine.Technical SpecificationsKey Derivation: Argon2id (Configurable up to 256MB RAM) + SHA-512 pre-hashing.Supported Algorithms: AES-256-GCM, AES-256-CBC, ChaCha20-Poly1305, XChaCha20-Poly1305, ARIA-256-GCM, Twofish, Serpent, Camellia, CAST6, RC6, SM4, GOST, SEED, Blowfish, IDEA, CAST5, TEA, and XTEA.Open-Source TransparencyThe complete source code is available for public audit on GitHub: https://github.com/Animesh-Varma/SigilFor the complete release roadmap and planned features, please visit: https://github.com/Animesh-Varma/Sigil/releasesFor any queries, please contact: sigil@animeshvarma.dev

When someone who sounds like your mother calls in a panic asking for bail money, Signet lets you verify it's actually her. Each paired contact generates a rotating 4-word phrase that only the real person's phone can produce. You ask her to read her phrase aloud; you type what you hear. Green banner: verified. Red banner: something's wrong — hang up and call her back on a number you already trust. Signet works over any channel. Voice calls, video calls, text, email, in person. The only requirement is that the two of you paired once, in person or over a trusted channel, before the crisis. Built for a world where AI voice cloning is commodity. Defends against: * Real-time voice and video deepfakes * Pre-recorded deepfake voicemails * Vishing using scraped biographical knowledge * Compromised messaging accounts where the attacker has chat history but not the paired device * SIM swaps * Reflection attacks: the rotating code is direction-aware, so an attacker echoing your own phrase back at you fails Core properties: * No server. No cloud. No account. No INTERNET permission. * No telemetry. No analytics. No ads. * Hardware-backed secrets via Android Keystore, StrongBox when available. * Offline-first; airplane mode does not affect any flow. * RFC-validated crypto (X25519, HKDF-SHA-256, AES-256-GCM, BIP-39). * Open source, AGPL-3.0. v0.3 includes in-person pairing, long-distance pairing, lost-phone recovery via paper or file, multi-relationship storage, in-person rekey, bulk backup (every paired relationship in one encrypted file with a single 8-word unlock), a printable challenge-response grid for when the other side can't reach their phone, liveness prompts for video calls, and screenshot blocking on sensitive screens. Not included: duress codes (gated on an abuse-analysis pass), account recovery (there is no account), cloud backup (out of scope forever).

NOTE: App has is not been developed any more and its source repo is no longer available. Silence is an SMS/MMS application that allows you to protect your privacy while communicating with friends. Using Silence, you can send SMS messages and share media or attachments with complete privacy. Features: * Easy. Silence works like any other SMS application. There's nothing to sign up for and no new service your friends need to join. * Reliable. Silence communicates using encrypted SMS messages. No servers or internet connection required. * Private. Silence provides end-to-end encryption for your messages using the painstakingly engineered Signal encryption protocol. * Safe. All messages are encrypted locally, so if your phone is lost or stolen, your messages are protected. * Open Source. Silence is Free and Open Source, enabling anyone to verify its security by auditing the code.

This app does not claim any permissions, so you can trust that it cannot send any of your private data to anyone. Messages produced by this app are secure and, for example, can be confidently sent over a network. It uses AES in GCM mode with no padding for encryption. It uses Argon2 and a random Salt to derive a secure key from the entered passphrase. This is a very powerful encryption. It also encrypts its settings before storing them on the device. However, the app might be vulnerable to some attacks. Although it is secure enough to stand attacks from non-expert crackers, e.g. normal users, should not be used for serious data encryption. Upgrading from 4.x to 5.x The encryption of the settings is changed. The app should be able to detect the old settings and upgrade them with the new encryption algorithm. However, it's a good idea to back-up your passphrase. (Well, it's generally a good idea to back-up encryption keys and passwords in a secure place). If the app didn't work after upgrade, uninstall and install it again.

Skewy has two objectives: 1) By pressing Play, Skewy's sound will mask your conversation / will make the data picked up by the microphone unusable (like a jammer). Giving someone who wants to use this data a near impossible task to filter out what you said. The Sound Tab allows for fine tuning of the sound level and set an optional alarm to notify when masking no longer occurs. 2) Skewy processes the data to identify ultrasonic (inaudible) signals. Such signals are used by advertisement/tracking companies such as SilverPush to access your phone without you noticing. Skewy can notify you when such a signal is present and optionally jam such a signal, if the frequency shield is turned on. All data is visualized with live graphs (both sound and frequency). It works best with a small hardware extension (a small speaker/headphone) to focus the sound on the mic, making it silent its surroundings. An idea how to build it is found in the Menu. No actual sound data is saved.

SmartFind is a find-my-phone app triggered by SMS from designated contacts. When a trusted contact sends an SMS containing your chosen keyword, SmartFind sounds a loud alarm — even if your phone is on silent or Do Not Disturb mode. Features: • Designated contacts — only people you trust can trigger the alarm • Custom trigger keyword — choose your own secret word (default: FIND) • Bypasses silent mode and Do Not Disturb — the alarm always sounds • Biometric authentication — all settings changes require fingerprint or PIN • Encrypted storage — contacts and settings secured with Android Keystore • Cooldown protection — prevents alarm spam with configurable cooldown • SMS spoof detection — validates SMS origin to prevent abuse • Audit log — full history of alarm triggers and events • Device admin — optional uninstall protection • Battery-aware — adapts behavior based on power save mode Privacy: • Zero internet connections — operates entirely offline • No analytics, no tracking, no cloud services • All data stored locally on your device • Phone numbers redacted in audit logs

SnapSafe is a camera app that keeps every pixel—and every byte of data—exactly where it belongs: on YOUR device. Why SnapSafe? We capture photos locally, encrypt everything in private storage, let YOU decide if GPS tags are added, and strip out tell‑tale metadata automatically. Free and Open Source, forever. We NEVER phone home or talk to servers, slurp analytics or usage stats, sprinkle ads or trackers in the code, or read files outside our sandbox. Key Features: • Zero‑Leak Design – The manifest skips android.permission.INTERNET; nothing leaves your device. • Fully Encrypted – Shots are written to app‑private storage using strong encryption. • Metadata Scrub‑A‑Dub – EXIF and other identifiers are wiped the instant you hit Share. • Secure Sharing – When you do share, we hand the file off via Android's native share sheet—no detours. • Anti-Doxing – Automatically Blur faces before sharing photos • PIN‑Locked Gallery – A separate PIN stands between curious thumbs and your photos. • Granular Location – Add coarse, fine, or zero location data—your call. • 100% Open Source – Auditable code in plain sight. • Poison Pill – Set a special PIN, that when entered, appears to work normally but actually deletes your existing photos. • Decoy Photos – Select innocuous decoy photos, these will be preserved when your Poison Pill is activated. That way your Gallery is not suspiciously empty. Privacy Policy: We collect nothing.

Collects and analyzes mobile radio data to make you aware of your mobile network security and to warn you about threats like fake base stations (IMSI catchers), user tracking and over-the-air updates. With SnoopSnitch you can use the data collected in the GSM Security Map at https://gsmmap.org and contribute your own data to GSM Map. Requirements: * Qualcomm-based Android phone (see device list) * Stock Android ROM, version 4.1 or later * Note: Custom Android ROMs like CyanogenMod may or may not work, depending on the availability of a Qualcomm DIAG kernel driver (DIAG_CHAR). * Root privileges on phone Incompatible Devices: * Samsung Galaxy S2 & S3 * Nexus 5 with stock Android * Huawei Ascend Y300

Spass is small but effective password manager for android. It can generate your password, copy them to clipboard and sync between devices using QR code. All passwords stored on your device, no internet connection or any type of account needed.

Transfer files to/from your home in a secure well proven way using the ssh/sftp subsystem. You will need a client like WinSCP or Filezilla on your desktop machine. Features: * No root required * based on the Apache Mina project * very fast transfer rates.

SshKeyMan lets you generate and manage your SSH keys on your Android device. It supports ed25519, ecdsa(p256), and rsa keys.

Standard Notes is a secure and private notes app. It syncs your notes securely across all your devices, including your Android devices, Windows, iOS, Linux, and Web. Private means your notes are end-to-end encrypted, so only you can read your notes. Even we can't read the contents of your notes. Simple means it does one job and does it well. Standard Notes is a safe and lasting place for your life's work. Our focus is making it easy to write notes wherever you are and syncing them with encryption to all your devices. Our users love us for: * Personal Notes * Tasks & Todos * Passwords & Keys * Code & Technical Procedures * Private Journal * Meeting Notes * Cross-platform Scratchpad * Books, Recipes, & Movies * Health & Fitness Log Standard Notes comes free with: * Seamless sync across all your devices, with easy to use applications on Android, Windows, Linux, iPhone, iPad, Mac, and web browsers. * Offline access, so you can access your downloaded notes even without a connection. * No limit on number of devices. * No limit on number of notes. * Passcode lock protection, along with fingerprint protection. * A tagging system to organize your notes (like #work, #ideas, #passwords, #crypto). * The ability to pin, lock, protect, and move notes to trash, which allows you to recover deleted notes until the trash is emptied. Standard Notes is completely open-source, which means when we say your notes are encrypted with industry-leading XChaCha-20 encryption, and that only you can read your notes, you don't have to take our word for it. Our code is open to the world to audit. We made Standard Notes simple because longevity is important to us. We want to make sure we're here, protecting your notes, for the next hundred years. You shouldn't have to find a new notes app every year. To sustain our development, we offer an optional paid program called Standard Notes Extended. Extended gives you access to powerful tools including: * Productivity editors (like Markdown, Code, Spreadsheets) * Beautiful themes (like Midnight, Focus, Solarized Dark) * Powerful cloud tools including daily backups of your encrypted data delivered to your email inbox every day, or backed up to your cloud provider (like Dropbox and Google Drive). You can learn more about Extended at standardnotes.com/extended. We're always happy to talk, whether it be a question, thought, or issue. Please feel free to email us any time at help@standardnotes.com. When you take the time to send us a message, we'll be sure to do the same.

This app is a demonstartion of a new exploit which manipulates the "startActivity" Binder event in a way that lets the ActivityManagerService die. This will also cause all other system services to die. The app allows you to check whether a device is vulnerable to the exploit. It is not intended to do any harm, it serves the purpose of a demo to show what the exploit looks like without abusing it. Affected Android versions: Android 10 / Android 11 Read this for more technical details: https://androidreverse.wordpress.com/

Status combines pseudonymous privacy-focused messenger and secure crypto wallet into one powerful communication tool. Chat with friends and growing communities. Buy, store, and exchange digital assets. Status is your Ethereum operating system. SECURE ETHEREUM WALLET The Status crypto wallet allows you to securely send, store, and exchange Ethereum assets such as ETH, SNT, stable coins such as DAI, as well as collectibles. Confidently take control of your cryptocurrency and digital assets with our multichain Ethereum wallet app, supporting Ethereum Mainnet, Base, Arbitrum, and Optimism. The Status blockchain wallet currently only supports ETH, ERC-20, ERC-721, and ERC-1155 assets; it does not support Bitcoin. PRIVATE MESSENGER Send private 1:1 and private group chats without anyone snooping on your communications. Status is a messenger app that eliminates centralised message relays for greater privacy and secure messaging. All messages are encrypted with end-to-end encryption. Additionally, no message exposes who the author or the intended recipient is, so nobody, not even Status, knows who is talking to who or what was said. EARN WITH DEFI Put your crypto to work with the latest decentralised finance apps and decentralised exchanges (DEX) such as Maker, Aave, Uniswap, Synthetix, PoolTogether, Zerion, Kyber, and more. CONNECT WITH YOUR COMMUNITY Explore, connect, and chat with your favourite communities and friends. Whether it is a small group of friends, an artist collective, crypto traders, or the next big organization - text and communicate with Status communities. PRIVATE ACCOUNT CREATION Stay private with pseudo-anonymous account creation. When creating your free account, you will NEVER have to enter a phone number, email address, or bank account. Your wallet private keys are locally generated and securely stored to ensure only you have access to your funds and financial transactions.

Stay Put is an app that helps prevent casual theft of your device while charging in public spaces. The app was created to solve a common problem: charging your phone in public spaces while traveling or camping. When you need to leave your phone unattended at a public charging spot, Stay Put acts as your guard. It sounds a loud alarm if someone unplugs your device, deterring potential theft. Stay Put is free software. It is published under the MIT open-source license. VERIFY APK ---------- APKs published on Codeberg Releases are signed with the following certificate. SHA-256: 61:05:14:5F:84:E5:CB:D6:97:F0:F6:E1:2C:97:77:04:2E:9B:2D:B6:67:A7:FF:0D:A4:12:F6:74:35:31:6D:D8 CORE FEATURES ------------- - Loud alarm when device is unplugged - Secure disarm with biometric authentication or device credentials - Option to allow disarm by plugging the device back to power - No tracking, no data collection FAQ --- WHEN SHOULD I USE STAY PUT? Stay Put is ideal when charging your phone in public spaces like: - Public libraries - Hostels - Campground bathrooms - Airport charging stations - Any shared charging area HOW DOES STAY PUT PREVENT THEFT? Stay Put doesn't physically prevent theft, but it acts as a deterrent. The moment someone unplugs your phone, a loud alarm sounds. The alarm can only be disabled using your biometric data or device credentials – or by plugging the device back to power (if this option is enabled). CAN I STILL USE MY PHONE WHILE STAY PUT IS ACTIVE? Yes, Stay Put runs in the background and doesn't interfere with normal phone usage. Just remember to disarm it before unplugging your phone.

Stingle Photos is a secure, open-source photo, video cloud storage and backup application that is safe, ad-free and easy to use. It provides strong encryption and privacy to keep you safe from data breaches and leaks. Easily sync and backup and share your photos and videos on our secure cloud storage. Why use Stingle Photos safe cloud storage app? Successor of wildly popular SafeCamera application, Stingle Photos is an open-source, secure, end-to-end encrypted media backup application with the state-of-the-art security technologies that ensure your privacy. * We put our users first by prioritizing your privacy * All your photos & videos are secured with end-to-end encryption * Unlike other companies, we only store the bare minimum of metadata on our servers: your email, registration date, payment plan, number of active devices, number and size of encrypted files * We don’t collect big data or track our users in any way * No need to fear for your data privacy - ONLY you can have access to your photos & videos Key features * Full on the fly encryption of video support: recording and playback * Fingerprint and face id support for fast unlocking * Ability to take photos & videos without entering a password or providing a fingerprint. * Backup and sync functionality. All your photos & videos are backed up in the background to the cloud and synced to other devices using the same account * Albums for better library organization * Secure sharing. You can share photos and videos with friends and family with strong end-to-end encryption. * As anonymous as possible. Registration just takes an email and password to start using the app * Stingle Photos is 100% free and open-source. It includes 1GB free cloud storage space. You only pay if you need more cloud storage. No ads or third-party libraries like that can track you. * We as a provider can’t see anything in your account. If the servers ever get hacked or law enforcement agencies request access to your data, they won’t get anything valuable. If you have any questions or suggestions, drop us a message at support@stingle.org

Stratum is an open-source two factor authentication app for Android. It features encrypted backups, icons, categories and a high level of customization. It also has a Wear OS companion app.It supports TOTP (Time Based) and HOTP (Counter Based) authenticators using either SHA1, SHA256 or SHA512 hashing algorithms. Mobile-Otp (mOTP), Steam and Yandex are also supported.2 Factor authentication provides an extra layer of security to your accounts by requiring the use of a one time code to log in. In addition to your username and password, you will need a code provided by Stratum. So even if your login details are compromised, your account remains safe.Features⚙️ Compatibility: Stratum is compatible with most providers and accounts.📲 Import: Easily migrate your accounts to Stratum from supported alternative apps.💾 Backup / Restore: Backup your authenticators with strong encryption. In case you lose or change your phone, you can always gain access to your accounts. You can save backups to cloud storage or to your device.🌙 Dark Mode: Stratum has a beautiful material design inspired look in either light or dark themes.⏺️ Icons: Find your authenticators easily with recognizable brand logos and icons next to each code.📂 Categories: Organize your authenticators into categories.🔒 Offline with few permissions: Stratum only requires a single permission¹ and does not require Internet access to function.🔑 Security: Set a password and use biometric authentication to protect your codes.🎨 Customization: Set icons and rename. You can also arrange your authenticators in any order you like so you can find them easily.⌚ Wear OS: Quickly view your authenticators directly from your watch. You can even set a favorite and place it in a tile. Please note that a connection to your Android device is required. Furthermore, F-Droid distributions of the app are not compatible with Wear OS, since non-free dependencies are required.(¹) To scan QR-Codes, the app requires the camera permission.-> FAQDisclaimerThis program is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your option) any later version.This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

SuperGenPass combines a Web site's domain and your master password to generate a unique password for each Web site you visit using a strong cryptographic hash. In addition to using the form when you run the app, you can also use the "Share Page" menu item in the Browser application to launch SGP and pre-fill the domain. Go to Menu → More → Share Page.

In challenging environments with limited or no internet connectivity or in the face of repression Tella makes it easier and safer to document events, whether that’s violence, human rights violations, corruption, or electoral fraud. ENCRYPTION: All of the content and data stored in Tella are encrypted. This means that unless the app is unlocked, all the data within Tella will remain inaccessible. FILE MANAGEMENT: Take photos, videos, or audio recordings directly in Tella, or import documents from your phone, and easily organize your files in folders. CAMOUFLAGE: Change the app icon and name to a seemingly harmless one, such as a calculator or a camera. QUICK DELETE: In just a few seconds, delete all the sensitive data and files stored in Tella. DATA-COLLECTION: Groups and organizations can collect data through forms and surveys, and received the data directly on their server.