// readme

Kupass

Kupass is an offline, open-source password manager for Android. Your vault stays on your phone: Kupass has no account or cloud sync, and it doesn’t collect analytics or crash reports.

Features

  • Every field of every entry (site name, username, password, URL, and notes) is encrypted with AES-GCM, using a key kept in the Android Keystore.
  • Opening a saved account asks for your fingerprint, face, or screen lock. Other accounts then open without another prompt until Kupass has been in the background longer than the timeout you choose in Settings.
  • Backups are .kupass files protected by a password you choose (PBKDF2-HMAC-SHA256 and AES-256-GCM), so you can restore them on a new phone or after reinstalling. Each export asks you to authenticate first.
  • You can import a Kupass backup, an older Kupass JSON backup, or a Google Password Manager CSV export.
  • Copied passwords are cleared from the clipboard after 45 seconds.
  • Kupass blocks screenshots and screen recording, and Android cloud backup and device-to-device transfer skip the vault.
  • The app comes in English and Indonesian, with light and dark themes and Material You dynamic color.

Privacy

Kupass makes…