Kunzisoft/KeePassDX
KeePassDX
KeePassDX is an Android password manager that opens, edits, and stores encrypted credential databases using the open KeePass 2.x file format. It keeps all password data stored locally on the device without requiring cloud sync or internet access, and supports multiple symmetric-key encryption algorithms including AES, Twofish, and ChaCha20 with Argon2 key derivation.
The app unlocks the credential database by delegating authentication to the platform's biometric API, allowing users to bypass the master password entry using fingerprint or face recognition. It generates one-time passwords locally by implementing the HMAC-based and time-based OTP algorithms from RFC 4226 and RFC 6238 for two-factor authentication, and persists WebAuthn credential private keys in the encrypted database using the CTAP2 credential ID format for local passkey-based sign-in.
KeePassDX injects credentials into other apps by running as an Android accessibility service that monitors UI state and programmatically fills text fields, and also provides a dedicated Android input method editor that displays credential fields and inserts text directly into the focused input element. The application structures credentials in a hierarchical tree of groups and subgroups, maintains a change history for each entry, and supports creating and editing encrypted databases with multiple cipher options.
Features
- KeePass Database Managers - KeePassDX creates and edits encrypted KeePass databases with multiple cipher options for secure credential storage.
- KeePass Database Compatibility - Reads and writes encrypted credential databases using the open KeePass 2.x file format with support for multiple cipher algorithms.
- Autofill Integrations - KeePassDX fills login forms automatically using stored passwords through the system autofill framework or a custom keyboard.
- Local-Only Autofill Stores - Injecting stored usernames and passwords into other Android apps using the accessibility service, autofill framework, or a custom input method keyboard.
- Credential Organization - KeePassDX structures stored passwords into hierarchical groups and subgroups for logical arrangement and easy retrieval.
- Biometric Unlocking - Unlocks the credential database by delegating authentication to the platform's biometric API, bypassing the master password entry.
- Passkey Private Key Stores - KeePassDX saves passkey-based authentication credentials and private keys on the device for secure sign-in.
- Credential Encryption - KeePassDX creates and edits password databases in KeePass format with AES, Twofish, ChaCha20, and Argon2 encryption.
- Offline Credential Databases - Keeping all password data stored locally on the device without requiring cloud sync or internet access.
- Password Management - An app that keeps all password data stored locally on the device without requiring cloud sync or internet access.
- Symmetric Cipher Implementations - Encrypts and decrypts database blocks using a pluggable cipher abstraction that supports multiple symmetric-key algorithms and key derivation functions.
- Pluggable Cipher Implementations - KeePassDX encrypts and decrypts database blocks using a pluggable cipher abstraction that supports multiple symmetric-key algorithms and key derivation functions.
- Credential Autofill Services - Injects credentials into other apps by running as an Android accessibility service that monitors UI state and programmatically fills text fields.
- Entry Revision Histories - KeePassDX maintains a change history for each credential entry, allowing users to review or revert to previous versions.
- Input Method Editors - KeePassDX provides a dedicated Android input method editor that displays credential fields and inserts text directly into the focused input element.
- Credential Tree Structures - Organises credentials in an in-memory tree structure of groups and subgroups, mirroring the KeePass XML schema for navigation and search.
- One-Time Passwords - Computes one-time passwords locally by implementing the HMAC-based and time-based OTP algorithms from RFC 4226 and RFC 6238.
- Local Passkey Storages - An app that saves passkey-based authentication credentials and private keys locally on the device for secure sign-in.
- Two-Factor Authentication - Generating and storing HOTP and TOTP one-time passwords locally within the credential database for two-factor authentication.
- Credential - Provides a dedicated Android input method editor that displays credential fields and inserts text directly into the focused input element.
- Sicherheit und Datenschutz - Password manager compatible with the KeePass ecosystem.
- Security & Privacy - Full-featured password manager compatible with KeePass databases.
