Password Store

app.passwordstore.pando85
by Zapstore _@zapstore.dev

Manage your passwords

Republished from GitHub / F-Droid by the Zapstore main account.

Pass-compatible password manager that stores passwords as encrypted (OpenPGP) text files. A community continuation of the original pass: project (GPL-3.0-only). This app can also act as an Android WebAuthn/passkey Credential Provider, allowing stored credentials to satisfy passkey requests from other apps. **Features:** - Clone an existing pass repository or start a new one - Create and organize password files - Sync with a remote Git repository - Decrypt and copy passwords - Automatically fill and save credentials in apps and supported browsers - Supports time-based one-time passwords (TOTP) for two-step authentication - Provides WebAuthn/passkey authentication to other apps

First release: Jul 28, 2026, 13 total releases.

Most recent release: Oct 28, 2026.

Repo

Appears in 0 app stacks.

0 sats / 0 zaps received in the past year.

Sats Received

Underlying data available via MCP: app_zaps, app_releases.

Zap Count

Underlying data available via MCP: app_zaps, app_releases.

Releases

  • Oct 28, 2026 1.27.0
    ### Added - Setting to enable Autofill directly from the app settings - Dialog showing the SSH server's authentication banner, if any - Android 17: runtime request for the local network permission and a connectivity check for local Git servers ### Changed - Autofill search pane: whitespace-tolerant search, persistent filter switches, start-ellipsised paths, better username lookup (also from the file path) and more inline suggestions
    More…
    - New password entries and Autofill-saved credentials honour the directory structure setting and keep the subfolder of the entry - Bouncy Castle and coroutines versions are aligned through BOMs ### Fixed - Classic Autofill no longer offers or fills passkey entries - Autofill-saved credentials are filled in right after creation, with the username pre-filled - SSH host key verification and compatibility with sshj 0.41 - Alert dialogs are no longer clipped by the keyboard on short screens - An empty Git author email is now allowed - Spanish translation fixes
  • Oct 27, 2026 1.26.0
    ### Changed - Passkey Fast Unlock now selects the persisted passphrase by the encrypted credential's PGP recipient, supports app-PIN protected credentials, enforces the configured expiry, and discards passphrases after each serialized request. Recoverable biometric retries no longer cancel in-progress prompts. ### Fixed - Passkey sign-in no longer fails for passphrase-protected PGP keys when the passphrase is cached with biometric Fast Unlock ### Fork infrastructure
    More…
    - Updated dependencies: Gradle 9.8.2, sshj 0.41.2, Kotlin/Compose 2.4.21, R8 9.5.28, CodeQL 4.39.1
  • Sep 29, 2026 1.25.2
    ### Fixed - Autofill no longer crashes when decrypting an entry
  • Sep 28, 2026 1.25.1
    ### Fixed - Physical GPG ID scopes are now normalized correctly for aliased identities - Replaced `runCatching` with try-catch in GpgIdScope to satisfy DenyListedApi lint
  • Sep 24, 2026 1.25.0
    ### Fixed - GPG recipient scope resolution now correctly handles nested identities, empty relative paths, and legacy explicit scopes - Recovery of nested GPG scopes during key selection preserves legacy behavior - GPG scope resolution no longer alters local key state for empty-scope recovery ### Changed - Updated dependency: androidx
    More…
    ### Fork infrastructure - Release workflow documentation improvements - `bumpSnapshot` now accepts `-PbumpType=major|minor|patch` and correctly increments patch version
  • Sep 23, 2026 1.24.0
    ### Fixed - Settings screen no longer crashes when the external OpenPGP provider is broken or unavailable - EC SSH key authentication with Android Keystore-backed keys works correctly after SSHJ 0.41.1 update
  • Sep 21, 2026 1.22.0
    ### Added - Full Pass-Secrets integration: password create, edit, move, delete, and rename operations are now Pass-Secrets aware - Pass-Secrets alias search and unlock with mapped names - Transactional batch Pass-Secrets moves with safe staging - Atomic Pass-Secrets metadata persistence and mutation error reporting ### Fixed
    More…
    - System font is now used correctly throughout the app - Pass-Secrets labels are excluded from launcher shortcuts and persisted intents - Pass-Secrets metadata versions are disambiguated - Hardened Pass-Secrets map resolution and error handling - Removed unused string resources ### Changed - Updated dependencies: Gradle 9.4.1, AGP 9.4.1, BouncyCastle 1.86, Compose BOM 2026.09.00, Kotlin 2.4.20, JGit 7.8.0, CodeQL 4.38.1
  • Aug 30, 2026 1.21.0
    ### Added - Configurable save directory for Autofill-saved entries under Settings > Autofill ### Fixed - Autofill save directory is now validated instead of silently rewritten, preventing unexpected save locations - Fast-unlock PINs are isolated per PGP identity so a PIN can unlock only the key it belongs to - Android SDK 37 compatibility by replacing removed `MODE_PRIVATE` constant
    More…
    ### Changed - Refreshed Public Suffix List for improved Autofill browser detection - Selective upstream reconciliation with agrahn/Android-Password-Store - Updated dependencies: Gradle 9.7.1, AGP 9.3.2, BouncyCastle 1.85.2, OkHttp 5.5.0, CodeQL 4.37.9
  • Aug 2, 2026 1.20.0
    ### Fixed - Passkey backup state credential encoding is now canonicalized for consistent Git sync ### Changed - Removed provenance metadata fields from passkey storage
  • Jul 31, 2026 1.19.3
    ### Fixed - Git sync for passkey credentials is now durable and recovers remote credentials on miss
  • Jul 31, 2026 1.19.1
  • Jul 29, 2026 1.19.2
    ### Fixed - Restored privileged browser Credential Manager responses for passkey authentication
  • Jul 28, 2026 1.19.0