Git Product home page Git Product logo

passman-android's Introduction

Passman Android

Latest Release

Get it on Play Store Get it on F-Droid Get it on IzzyOnDroid

This app is only compatible with Passman V2.x or higher.
The passwords will be provided by Passman.

Current features

  • Setup app (enter the nextcloud server settings or use SSO)
  • App start password option based on the android user authentication
  • View, add, rename and delete vaults
  • Login to vault
  • Display credential list
  • View, add, edit and delete credentials
  • Add, download and delete files
  • OTP generation
  • Basic Android autofill implementation
  • Password generator
  • Encrypted offline cache
  • Encrypted stored vault and cloud connection passwords

FAQ

Read our frequently asked questions article

Build locally

Required packages

  • cmake
  • gcc
  • git

Commands

  1. Clone the repo
  2. Setup the git submodules with git submodule update --init --recursive
  3. Open project in Android Studio and install the SDK an the NDK
  4. Copy openssl.conf.example to openssl.conf
  5. Edit the ANDROID_NDK_HOME in openssl.conf to match your local NDK path
  6. Edit the HOST_TAG in openssl.conf to match your system arch
  7. Run build-openssl.sh
  8. If you want to compile either an alpha or release version, create a keystore either with Android Studio or keytool and add at least a key for the alpha build:
    keytool -genkey -v -keystore keystore.jks -alias beta -keyalg rsa
    
  9. Create a gradle.properties file based on gradle.properties.example and fill in the appropriate values for your keystore. If you only build debug builds you can leave the default values.
  10. Use Android Studio to build or otherwise build with gradle.

Testing server

Here you can use our demo system.

Support Passman

Passman is open source but we’ll gladly accept a beer or pizza! Please consider donating:

passman-android's People

Contributors

andyscherzinger avatar animalillo avatar axellebot avatar binsky08 avatar brantje avatar comradekingu avatar fynngodau avatar hahuk avatar honggoff avatar morrisjobke avatar nextcloud-bot avatar rakekniven avatar seddarj avatar valdnet avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

passman-android's Issues

Conect to my Nextcloud not working viia Proxy

I need to use a proxy to connect to my owncloud, no matter if I'm connected with an VPN or directly use the company network. While I can connect to my nextcloud with the browser in both szenarions (direct compny network or connection via VPN), I can not connect with passman as long as I use the VPN. I can not see any error messages in passman, it just doesn't show any of my login information. Is there a way to see debug information? Does the extension use the brower proxy settings with all exceptions?

Build fails due to invalid signing configuration

When building with the gradle wrapper, I get the following error:

FAILURE: Build failed with an exception.

* Where:
Build file '/home/hong/git/passman-android/app/build.gradle' line: 11

* What went wrong:
A problem occurred evaluating project ':app'.
> Could not get unknown property 'ALPHA_STORE' for SigningConfig_Decorated{name=alpha, storeFile=null, storePassword=null, keyAlias=debug, keyPassword=null, storeType=null, v1SigningEnabled=true, v2SigningEnabled=true} of type com.android.build.gradle.internal.dsl.SigningConfig.

Indeed the signing configurations reference these properties ALPHA_STORE, ALPHA_STORE_PASSWORD, etc, the same for the release config.

Did you mean to use environment variables, or how do you set these properties?

Also, there is a build type debubug, which I believe is a typo.

Passman APP- incorrect settings

Hi,

I'm having issues with connecting to passman with android app.
I'm using Oneplus 7 Pro, with latest OxygenOS 10.
Nextcloud is running latest version 16.0.5, Passman version 2.3.2

With browser everything works, all other features are fine.
I'm using HTTPS with Let's Encrypt certificate.

Error message from app is "Incorrect settings"

any advice?

Copy/open URL

Please add a button to copy the URL and change the URL from a text to a link

ssl error on new Nextcloud installation

Hi, this is a fresh Nextcloud install on Ubuntu 18.10. I did the Nextcloud install by checking the package on initial Ubuntu install steps. Been a while since I worked with Linux, so bit rusty, I tried installing the cert with certbot, I got the green padlock, and the redirection from http to https worked, but I ended up losing my Nextcloud home page, it was returned to the Apache default page. I finally found that command : nextcloud.occ config:system:set trusted_domains 2 --value=mydomainname.com. While this got the login page back, the redirection doesn't work and browzers complains that the page is not secured, but if I check the details, it does show the letsencript cert. It is probably just a matter of updating settings, but I do not know which file to update. Cheers !

sort credentials

credentials are not yet sortable (sorted by creating date only)

Keepass2android-like Password Keyboard

Due to concerns about the security of Android's clipboard, keepass2android uses a keyboard to input passwords and usernames. This works quite well (even better than the clipboard in my opinion). It would be great to see it implemented here!

Offline Version

It would be nice, if the app safe the passwords offline. So if you don't have a connection or a slow connection, you could still use the app.
Thanks

Cant connect to my nextcloud

If I try to connect to my nextcloud I get the following message:
value <! Doctype of type Java.lang.string cannot be converted to JSONArray

Can I use the App or is it Not for public use now?

Passman seems to show deleted credentials

I went to use Passman on my phone today and was confused to find old dummy credentials from Keefox in there. I was sure I'd deleted them.

On checking the web interface, I found that they were in the "Deleted Credentials" bin.

I clicked each credential, clicked "Destroy", and then closed and re-opened Passman on my phone. It now doesn't show those dummy credentials.

My guess is that Passman (or maybe the API it uses?) isn't differentiating between deleted and available credentials.

Password master on open app

Hi,

It's possible implement password master on open passman-android? On passman for Chrome por firefox exist this, on Android app not, it's possible implement this?

Thank you and sorry for my english

invalid URL Backend or connexion error

Hi,

I'm currently using a public nextcloud instance at cloud.unixcorn.org for testing purpose before running up my own nextcloud instance.

On this nextcloud instance, passman is active (v2.1.4).
https is on with let's encrypt certificate.

Android official app works fine.

But when i try to set up passman app, it tells me :
Invalid URL Backend or connexion error.

Can you solve this issue or tell me what information you need to work on it ?

Network error :(

Hi

Installed Passman on my OnePlus 3 (Android 7.1.1) from Play Store. I get a network error when I try to connect at my NextCloud account !
If I don't put https in front it complains incorrect url so I putted https://monserveur and my credentials but I always get a Network error !
Tested with cellphone connected to Wifi !
Something to try or test ?

Thanks

Clean clipboard automatically

I would like the app was able to clean the clipboard password in X seconds, configurable through app settings, or just long pressing the copy button, a pop up letting choose how many seconds do you want to have it in the clipboard (like 10, 30, 60, unlimited, and by default 30s).
I think its a tiny change and improves the security greatly if there is someone near peeping.

Passsman fails to login when TOTP for Nextcloud is activated for a user

I have Nextcloud 11.00 with the Passman addon running. When I install TOTP in Nextcloud and activate it for a user, it isn't possible to log into the Passman app, when I deactivate TOTP in Nextcloud, logging into the Passman app is possible again.

Could TOTP for Nextcloud be incorporated in the app?

Kind regards,

RR69

Share vault with other Nextcloud users

The possibility to share the access to a vault with other NC users, thus enabling password sharing in teams, would be a great and helpful feature for co-workers.

Next Version

Hi,
I want to know, when the next version will be released?
Do you still working on this project?

Feature request password autofill via accessibility service

Description

Automatic filling of passwords using Andriod's accessibility service. Bitwarden's app has this feature and their code for it is at https://github.com/bitwarden/mobile/tree/master/src/Android/Accessibility

Benefit / value

Allows the user to quickly fill in passwords in other applications.

Risk / caveats

It requires the app to request more permissions but the latest versions of Android allow the user to device if they want to grant or deny permission.

Trust anchor for certification path not found when trying to connect via https

Hi there,

After reinstalling the custom ROM on my mobile device (same ROM, new version) passman alpha stopped working properly. If I recall correctly, it did work just fine before.
The fact is, I can't connect to my NC via HTTPS, HTTP connects just fine.
I have a dockerized NC with and one apache reverse proxy with the Let's Encrypt certs. Usual nextcloud clients and web is working as expected, even other apps like notes, calendars, contacts, etc... just passman fails to connect.

The error it gives is:
Network error: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found.

Don't know how to debug more to give you something to see. By the way, you can see my let's encrypt certificate on https://cloud.docampo.net
Best,
Angel

New App Icon

I know there are many other things to do first, but it would be nice to have an app icon which fits to the other official NC-Apps

Beside thanks for every minute spend on this project!!

Build fails: Could not find com.android.tools.build:gradle:3.0.0

Top-level build.gradle must include Google Maven repo, as explained here. Otherwise when you compile app from command line you get this:

A problem occurred configuring root project 'es.wolfi.app.passman'.
> Could not resolve all files for configuration ':classpath'.
   > Could not find com.android.tools.build:gradle:3.0.0.
     Searched in the following locations:
         https://jcenter.bintray.com/com/android/tools/build/gradle/3.0.0/gradle-3.0.0.pom
         https://jcenter.bintray.com/com/android/tools/build/gradle/3.0.0/gradle-3.0.0.jar
     Required by:
         project :

-- cross-post from relan over at GitLab: https://gitlab.com/fdroid/rfp/issues/199

Https with self signed certificates

Hey,

I am hosting my nextcloud server on my home network using a https connectyion with a self signed certificate.
The thing is designed to be a hub for houshold members while being at Home only
So no making it accessible from the internet exept through a vpn for me, while im away.

now i installed a self signed certificate to use a https connection.
Since that moment the Passmann amdroid app refuses to connect to the server claiming SSL Handshake failed

Main nextcloud app works fine
Importing the ssl certificate into my phone, Androis 7.1, didnt help
The app works if i disable https on the server.
Is there a way to make it understand a self signed cert ?

Android Firefox extension Server error

On the firefox android server extension I am getting this error when it is trying to save.

Error connecting to server (Error: TypeError: window.contextMenu is undefined)

But it did save the password. But it will not display it.

Error: Socked closed during handshake

Hello,

after having problems with connecting with the passman app to my nextcloud due to bad SSL configuration, I have a new problem now. The SSL configuration seems to be fixed and is validated by SSLLab.com with grade A. Now the passman app shows the error message "socked closed during handshake" when trying to login. Unfortunately, I don't get any further details about what exactly is going wrong. I just know that connecting to the nextcloud via browser works fine and also the SSL configuration seems correct.

I'm using a phone with Android 4.4.2 and SSLLab.com shows an approved simulation for that version of Android. Also connecting to the nextcloud via chrome browser from the same phone works. The SSL certificates are official Let's Encrypt certificates.

Do you guys have any hint what might be wrong?

Thanks for any hints.
Timo

Network error

Unfortunately I'm having the same problem like stated here:

#13

I'm using latest passman app on nextcloud 13 from this repo and the android app on my galaxy s8.

The chrome extension runs just fine but on android using an app-password because of 2factor auth I get network error after entering my https-url and my credentials. However I see my password safe being displayed, just can't open it.

Certificate Chain is fine and fully served by the server as stated by qualys test with A-rating.

  • Nextcloud 13
  • Android 7
  • Passman 2.1.5
  • Android Passman latets from Play Store

Invalid backend URL

Hi!

I'm running passman in a nextcloud 11.0.2 environment with NGINX as webserver, and a second NGINX as reverse proxy in front of it. The FQDN of my nextcloud 11.0.2 host is pass.internal.invalid, and the reverse proxy serves this as pass.mydomain.com to the internet.

This setup results in the android app reporting an invalid backend URL when approaching pass.mydomain.com.

Whenever I am connected to the local network and use pass.internal.invalid as host in the android app, it just works.

I am trying to read through the source to find out which variable it is fetching to try and connect to the backend url, but am failing miserably. Can anyone give me a hint?

very problematic issue with otp feature !!!

Hi

Being in travel i use passman version 0.141 on my two android devices and i had the very bad surprise that otp feature is buggy (working for some sites but not all). For the ones not working it generates awrong otp code making it impossible to log on these websites 👎
Never had that problem with the firefox extension on computer !!

Vincèn

Passman no longer on Play Store?

I have a need to reinstall Passman, but it seems it's no longer available on the Google Play Store. The link from passman.cc returns 'page not found'.

Allow HTTPS client-side certificate

Hello,

I need to use client-side certificate on HTTPs level for security considerations.
That would be great if the application could use the device truststore (like any android web browser does) to allow that :-)

OTP codes incorrect

I am not sure how to troubleshoot this, but the OTP codes as shown in the app are not correct. I can compare them in real time with the extension and they are different. I check the clock on both devices and it was the same. Attempting to use the codes from the android app with an application validates that they are incorrect.

Custom fields display

There are custom fields in the passman app on each data item. I would like to have them at least displayed on the app data summary.

Network Error: Value <!DOCTYPE of type java.lang.String cannot be converted to JSONArray

Hello,
I discovered Passman yesterday and I installed it on my Nextcloud 12 instance. It work when I use it from Nextcloud and from the Firefox Add-on but I had a problem.

I took a screenshot of my screen.

Now, I just can connect and It works...

Is it possible that I have this error with a wrong password? I try multiple times, I don't think the password is the problem but it's not very clear...

ps: Thanks for your work! Can I find a roadmap somewhere? Do you plan to support iOS for mobile? :-)

Error on Android 9: net:ERR_CLEARTEXT_NOT_PERMITTED

Unfortunately, the Android app does not work in Android 9 (Huawei P30 Pro):

When trying to login, I get the error message:

Website nicht verfügbar

Die Webseite unter http://my.nextcloud.url/index.php/login/flow/grant?clientidentifier=&stateToken=s0mEteXtAndNumbers konnte nicht geladen werden, weil

net:ERR_CLEARTEXT_NOT_PERMITTED

(In English: Website not available, could not be loaded due to…)

Please note, that I entered https://my.nextcloud.url, not http://my.nextcloud.url, but in the error message, the URL is wrong, without s.

Exactly this problem is mentioned here: https://stackoverflow.com/questions/52707918/webview-showing-err-cleartext-not-permitted-although-site-is-https
And here: https://stackoverflow.com/questions/45940861/android-8-cleartext-http-traffic-not-permitted

The solution seems to be, to add to the application tag:

<application
  …
  android:usesCleartextTraffic="true"
  …>

Could you please fix this problem? Thank you in advance.

Network Error with Let's Encrypt on Android 4.4.2

Hello,

I'm referring to issue #13 since I'm having similar network errors from the time I'm trying to use recent version of passman on my Android 4.4.2 based Zenfone 5. I do have certificates from Let's Encrypt and accessing my Nextcloud installation, and also the web-based password manager works fine - even from my Zenfone 5.

The error message in passman when trying to log in is: Peer not trusted by any of the system trust managers.

Should I manually install the root certificate of Let's Encrypt?

Can anyone help me with that problem? If I understand issue #13 correctly, it is now working for others on old Android versions...

Best regards
Timo

To do for V0.14

I plan on adding this for the next big update:

  • Search of credentials on merge 31800bf
  • Credential sorting done on #37 missing some git fixes that has slipped from some cryptotests i was making on another branch
  • HTTP/HTTP protocol picker fixed by merge 7b6153d

If there is anything you think it's easy to implement and would like to see on the next release, feel free to comment on this issue!

Sync remove password generated with the extension!!

Hi,

Since I upgrade the extension to 2.0.4 version, when I add a password through the password generator, it appears on the extension menu. But if I go to my nextcloud and I search for it, it's not present. And when I sync passwords, it disappeared from the extension and the password is lost!!

It is not every time, but still often... It's a big and critical bug, isn't it?

F-Droid

Hi,

Are there any plans to get this app on F-Droid?

Thank you!

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.