A fork of agrahn/Android-Password-Store (itself a fork of the now-archived Android Password Store), a pass-compatible password manager, with the added ability to act as an Android WebAuthn/passkey Credential Provider (so your pass passwords can also satisfy passkey requests).

The passkey implementation is fully compatible with pando85/passless: credentials generated by passless can be imported and used on Android, and passkeys created in Password Store interoperate with passless-based tooling.

• GitHub Releases
• F-Droid — listed as "Password Store (Passkey Edition)"

Password Store acts as an Android Credential Manager provider for WebAuthn passkeys. This means your existing pass store can hold passkey credentials alongside passwords, and Android apps/browsers can offer them during sign-in flows.

Key points:

• Create & use passkeys directly from the Credential Manager prompt — no separate app needed.
• Discoverable (usernameless) credentials are supported: when a site requests a passkey without specifying a username, all matching credentials are presented for selection.
• Fully compatible with passless: credentials created by passless on the command line can be imported and used on Android, and passkeys created in Password Store interoperate with passless-based tooling.
• Encrypted at rest with the same OpenPGP key you already use for passwords — no additional key management.
• Browser support includes Chrome, Firefox (and F-Droid variants like Fennec/Mull), DuckDuckGo, and any browser that delegates to Android Credential Manager.

For implementation details, security invariants, and maintainer guidelines see PASSKEYS.md.

The original documentation can be found here and there.

This fork periodically incorporates upstream fixes and features from the original project and its active forks. Development here is focused on the passkey/WebAuthn credential provider feature; general password-store improvements are pulled in as they land upstream.

gpg --armor --gen-random 1 24 # generate a strong random password; use it in the next step
gpg --armor --export-secret-keys <ID of key used for pass> | gpg --armor --symmetric --output myKeyForPass.sec.asc

File myKeyForPass.sec.asc can be directly imported into Password Store via Settings → PGP Settings → Key Manager → +; enter the password from the first step when asked for the backup code.

1. In the main app window, select the key that you use for pass/Password Store from the "My Keys" list.
2. In the window that appears, tap the three-dot menu in the top right corner and select "Backup key".
3. Write down the backup code, then save the backup file to your phone.
4. Import this backup file into Password Store by navigating to Settings → PGP Settings → Key Manager → +, and enter the backup code when prompted.

Issues and pull requests are welcome at the GitHub repository. Development is focused on the passkey/WebAuthn feature; upstream password-store fixes are merged periodically. See CHANGELOG and Release process.

This project is licensed under GPL-3.0-only and is a fork of agrahn/Android-Password-Store, itself a fork of the archived android-password-store/Android-Password-Store.