AIPOS Password Manager
com.aipos.aipospm
Zapstore _@zapstore.dev Premium, fully offline, and secure Android password and 2FA TOTP manager.
Republished from GitHub / F-Droid by the Zapstore main account.
AIPOS Password Manager is a premium, fully offline, and highly secure Android application for storing passwords, API keys, and 2FA secrets. Designed with modern Material You guidelines, hardware-backed cryptography via Android Keystore, and a local-first architecture. Key Features: * Dual Vault Support: Seamlessly manage credentials (passwords, usernames, URLs) and API keys with a tailored developer experience. * Premium Design System: Visual identity featuring a trust-centric palette (teal-blue, soft indigo, warm amber) and native Material You dynamic styling on Android 12+. * Animated Vault Health Dashboard: Central dashboard featuring an animated health score circle, staggered entrance animations, and quick actions. * Hardened Security: - AES-256-GCM encryption with hardware-backed keys inside the Android Keystore. - PBKDF2 with HmacSHA256 (120,000 iterations) for master password verification. - EncryptedSharedPreferences to safely cache user authentication metadata. - Native Biometric Prompt support. * Portable Encrypted Backups: Export and import your local database to an encrypted JSON backup file using a password derived via PBKDF2 (100,000 iterations) + AES-256-GCM. * Offline Breach Check: Real-time evaluation of master passwords and entry credentials against a bundled database of common weak passwords—without making a single network request. * Built-in 2FA Authenticator (TOTP): Scan QR codes directly offline using the built-in CameraX scanner and generate time-based one-time passwords directly within the app. * Auto-Lock Timeout: Configurable inactivity timers (Immediately, 1 min, 5 min, 10 min, Never) to keep your vault secure when backgrounded. * 100% Offline & Private: Zero network permissions declared. Your data never leaves your device. * Third-Party CSV Importers: Import credentials from Bitwarden, KeePass, and 1Password CSV exports.
First release: Aug 27, 2026, 6 total releases.
Most recent release: Oct 16, 2026.
Appears in 0 app stacks.
0 sats / 0 zaps received in the past year.
Sats Received
Underlying data available via MCP: app_zaps, app_releases.
Zap Count
Underlying data available via MCP: app_zaps, app_releases.
Releases
- Oct 16, 2026 1.6.1
- Sep 26, 2026 1.6.0# AIPOS Password Manager — Release Notes ## What's New in v1.6.0 ### 1. Instant Vault Startup & Performance Engine - **Decoupled Fast-Path Password Streaming**: - In previous versions, vaults containing over 200 credentials experienced a 2 to 4 second startup delay while the hardware Keystore audited every entry for breach and reuse status. - The password listing pipeline is now decoupled from asynchronous security audits. The password list streams directly from SQLite to the screen in less than 15 milliseconds upon unlocking. - **In-Memory Session Decryption Cache**: - Added a thread-safe `ConcurrentHashMap` caching decrypted plaintexts for the duration of an authenticated session.
More…
- Background security audits reuse cached values, eliminating redundant hardware Keystore calls and preventing UI stutters. - For strict security, the cache is completely flushed from memory immediately whenever the vault locks, times out, or when the app is backgrounded. --- ### 2. Out-of-the-Box Category Folder Presets - **Ready-to-Use Folders**: - Fresh installations and vaults now automatically seed curated category folders so users never start with an empty category list: - **Passwords**: Email & Accounts, Social Media, Financial & Banking, Work & Productivity, Entertainment & Media, Shopping & E-Commerce, Developer & Cloud. - **API Keys**: AI & Chatbots, Coding & Developer, Cloud Infrastructure, Payment Gateways, Communication & SMS, Analytics & Monitoring. - **One-Tap "Load Presets" Tool**: - Added a "Load Presets" button with confirmation dialog in Category Manager (*Settings > Security & Data > Manage Categories*). - Restores any deleted default presets instantly without altering or overwriting your custom categories. --- ### 3. Smart 1-Tap Category Suggestions - **Proactive Offline Heuristics**: - When creating or editing a credential or API key, AIPOS analyzes the entry's title, URL, and service name 100% offline. - Surfaces a 1-tap suggestion chip directly beneath the Category selector: - Typing *"Google Account"*, *"Gmail"*, or *"Yahoo"* suggests `Folder: Email & Accounts`. - Typing *"ChatGPT"*, *"OpenAI"*, *"Claude"*, or *"Gemini"* suggests `Folder: AI & Chatbots`. - Typing *"GitHub"*, *"GitLab"*, or *"Docker"* suggests `Folder: Coding & Developer` / `Folder: Developer & Cloud`. - Typing *"Stripe"*, *"PayPal"*, or *"Bank"* suggests `Folder: Payment Gateways` / `Folder: Financial & Banking`. - **Instant Category Creation**: - Tapping the suggestion chip automatically assigns the category, creating it on the fly if it did not exist in your vault yet. --- ### 4. Curated Custom Icon Suite - **Personalized Visual Identification**: - Assign curated Material Design icons to both Passwords and API Keys when adding or editing entries. - Expanded icon collection with 73 curated icons organized across 4 distinct domains: Developer & Cloud, Services & Web, Security & Devices, and General. - Includes real-time search, icon preview, and graceful fallback to initial avatars. - **Universal Rendering**: - Custom icons appear consistently across vault list cards, detail screens, and Home favorites. --- ### 5. Auto-Lock Lifecycle & External Activity Hardening - **Static Background Timestamp Tracking**: - Auto-lock background timing is persisted across activity destruction, preventing auto-lock bypass when the system trims memory in the background. - Configuration changes (screen rotation, folding/unfolding) are guarded against false auto-lock triggers when timeout is set to Immediately. - **External Activity Auto-Lock Suppression**: - Seamlessly handles transitions to Android system file pickers (Storage Access Framework) and runtime permission dialogs without locking the user out mid-task. --- ### 6. Robust Backup Export & Restore Architecture - **Prompt-First Backup Password**: - Tapping Export Backup now prompts for and validates the backup password before opening the system file picker. - Added confirm password field with mismatch validation and visibility toggles on both export and import dialogs. - State preservation prevents URI or dialog loss across screen rotations. --- ### 7. Direct Website URL Launching - **One-Tap Browser Navigation**: - Added an "Open in Browser" action button alongside clipboard copy for website URLs in Password Detail view, featuring safe intent handling. --- ### 8. Comprehensive Database Migration Coverage - **Room Database v6 & AutoMigration from v1**: - Automated migration support from schema v1 through v6 guarantees smooth upgrades for users across any app release without data loss. - Sep 25, 2026 1.5.0# AIPOS Password Manager — Release Notes ## What's New in v1.5.0 ### 1. Configurable Vault Sorting & Custom Ordering - **6 Flexible Sort Modes**: Choose how your credentials appear via the new Sort action in the top app bar: - **Title (A-Z)**: Alphabetical by title. - **Title (Z-A)**: Reverse alphabetical by title. - **Date Added (Newest First)**: Most recently added entries first. - **Date Added (Oldest First)**: Oldest entries first.
More…
- **Recently Updated**: Most recently edited or updated credentials. - **Custom Order**: Completely user-defined manual arrangement. - **"Keep Favorites on Top" with Visual Section Dividers**: - Toggle "Keep Favorites on Top" in the sort bottom sheet to keep starred credentials pinned above regular items. - Beautiful visual section headers (`FAVORITES` and `ALL PASSWORDS` / `ALL API KEYS`) clearly delineate pinned entries and display live item count badges. - Chosen sort rules apply cleanly within both sections. - **Interactive Custom Reordering**: - In **Custom Order** mode, credential cards display intuitive **Up** and **Down** arrow buttons. - Move items up or down instantly with zero lag. - **Atomic Batch Swapping**: Order updates are committed inside Room transactions (`db.withTransaction`), guaranteeing data consistency with zero race conditions. - **Favorites Boundary Guard**: Starred favorites stay within the favorites section; regular entries stay within the regular section. - **Filter & Search Protection**: Arrow buttons automatically hide during active search or category filters to prevent corrupting your global sequence. - **Persistent Preferences**: - Sort selections and favorite-pinning settings persist across app sessions via Jetpack DataStore (`VaultPreferencesManager`), maintained independently for Passwords and API Keys. --- ### 2. Segregated Category Management (Passwords & API Keys) - **Type-Isolated Categories**: Categories are now strictly segregated between **Passwords** (`CategoryType.PASSWORD`) and **API Keys** (`CategoryType.API_KEY`). Password screens only show password categories, and API Key screens only show API key categories. - **Dedicated Category Hub**: Added a full **Category Manager** screen in *Settings > Security & Data > Manage Categories* featuring: - Tabbed interface switching between **Passwords** and **API Keys**. - Category creation with custom name and a 10-color Material Design palette. - Case-insensitive duplicate name validation. - Live usage badges showing how many items belong to each category. - Safe category deletion that untags credentials without deleting items. - Automatic active filter reset to "All" if an active filter's category is deleted. - **CSV Import Category Isolation**: Third-party CSV imports (Bitwarden, 1Password, KeePass) now strictly assign imported categories to the Password category domain. --- ### 3. Room Database v5 Migration - **Seamless Upgrade**: Implemented Room `@AutoMigration(from = 4, to = 5)` preserving 100% of user data. - **Schema Updates**: - Added `sortOrder INTEGER NOT NULL DEFAULT 0` column to `passwords` and `api_keys` tables. - Added `type TEXT NOT NULL DEFAULT 'PASSWORD'` column to `categories` table. - Sep 22, 2026 1.3.0
- Sep 21, 2026 1.4.0# AIPOS Password Manager — Release Notes ## What's New in v1.4.0 This major release delivers advanced privacy protections, comprehensive trash & recovery capabilities, and real-time duplicate/reused password auditing. --- ### 1. Screen Privacy Toggle (`FLAG_SECURE`) - **Block Unauthorized Capture**: Enforces Android's `FLAG_SECURE` window flag, preventing Android screenshots, screen recordings, and hiding the app's contents from the Recent Apps overview.
More…
- **User-Configurable**: Added a **Screen Privacy** toggle inside *Settings > Security*. Users who need to take screenshots (e.g. for personal documentation) can selectively toggle it off, while keeping it enabled by default for maximum protection. - **Dynamic Lifecycle Handling**: Dynamically attaches or detaches the secure flag at runtime without requiring an app restart. --- ### 2. Trash / Recently Deleted (Soft Deletion & Recovery) - **Safety Net for Deleted Credentials**: Accidental deletions are no longer permanent data loss. Swiping to delete or deleting from the detail screen moves credentials into the **Trash**. - **Dedicated Trash Management Screen**: Added a full **Trash** screen accessible via *Settings > General > Trash* with: - Tabbed interface switching between **Passwords** and **API Keys**. - Informative banner highlighting the 30-day auto-purge policy. - Per-item badges displaying exact days remaining before permanent deletion (e.g. `29d left`, `Today`). - Single-tap **Restore** to immediately recover credentials back into active vault view. - Per-item **Delete Forever** with confirmation dialog. - Top-bar **Empty Trash** action with dual confirmation dialog to purge all deleted items at once. - **Automatic 30-Day Purge**: When the vault initializes, any items deleted more than 30 days ago are automatically and securely purged from the local SQLite database. - **Database Schema Migration**: Implemented Room `AutoMigration(from = 3, to = 4)` with zero data loss, adding `isDeleted` and `deletedAt` columns. --- ### 3. Reused / Duplicate Passwords Audit & Vault Health Integration - **Duplicate Password Detection**: The vault now automatically detects when identical passwords are used across multiple accounts without ever transmitting data off-device. - **Vault Health Score Impact**: Vault Health score dynamically penalizes both breached and reused passwords: $$\text{Score} = \max\left(0, \frac{\text{Total} - \min(\text{Total}, \text{Breached} + \text{Reused})}{\text{Total}} \times 100\right)$$ - **Amber Warning Hierarchy**: - **Compromised passwords** remain highest priority (Red status, Red filter chip). - **Reused passwords** trigger an Amber status (*"Attention: X reused passwords detected across accounts"*). - Tapping the Amber warning card navigates directly to the Passwords screen with the **Reused** filter chip active. - **Dedicated Reused Filter Chip**: Added an amber `Reused (N)` filter chip to the category bar for instant one-tap inspection. - **Visual Repeat Badges**: Reused password cards display an amber repeat icon badge and matching accent bar to easily identify which accounts share passwords. - **Optimized Single-Pass Vault Audit**: Decryption and analysis occur in a single unified background pass on `Dispatchers.Default` (debounced by 300ms), ensuring high UI responsiveness even with hundreds of vault entries. --- ### 4. Native Android Autofill Service - **Seamless Credential Filling**: Directly autofill usernames and passwords into mobile applications (Spotify, Twitter, banking apps) and web browsers (Chrome, Firefox, Brave) via Android's native Autofill Framework. - **Biometric & Master Password Protection**: Decrypted credentials are never exposed without authentication. Every autofill attempt requires unlocking via Biometrics (`BIOMETRIC_STRONG`) or Master Password. - **Smart Domain & App Matching Engine**: Automatically correlates web hosts (e.g. `github.com`) and Android package names (e.g. `com.spotify.music`) with saved vault credentials. - **Interactive Credential Search**: Tap "Search in AIPOS Vault..." from any autofill prompt to unlock and select any credential on-the-fly. - **System Settings Integration**: Added an Autofill Service card in *Settings > Security* with live Active/Disabled status indicators and direct shortcuts to Android's system autofill selector. - Aug 27, 2026 1.2.2# AIPOS Password Manager v1.2.2 This release addresses usability bugs related to the swipe-to-delete gesture, restoration mechanism, critical scrolling performance and UI freeze issues on large vaults (e.g. 200+ entries) caused by cryptographically heavy background tasks. ## Bug Fixes & Refinements * **Optimized Vault Health Computations**: Fixed list scrolling lag and UI jank in vaults with hundreds of entries. The vault breach check (`breachedPasswordCount`) has been optimized to: * Run Keystore decryption operations off the main thread on `Dispatchers.Default`. * Debounce database flow emissions (by `300ms`), collapsing rapid multi-insert bursts (such as during CSV imports) into a single optimized validation sweep. * **Enhanced CSV Import Responsiveness**: Prevented system ANR (App Not Responding) dialogues during large data imports by offloading Keystore decryption queue processing. * **Reliable Undo Restoration**: Fixed a bug where clicking "Undo" after a deletion failed to show the restored item immediately. Restored entries are now re-inserted with the current timestamp so that they appear instantly back at the top of the sorted vault lists.
More…
* **Accidental Delete Prevention**: Increased the horizontal swipe threshold to 50% of the screen width. This prevents diagonal finger movements from accidentally triggering deletions during normal vertical scrolling. * **Descriptive Delete Confirmations**: Contextualized the undo confirmation messages to state the name of the deleted credential (e.g. `Password 'Google' deleted`).