A minimalist, hardware-assisted KeePass reader and credential sender for Android.
KeePassSD is a unique experiment in software development: 100% of its code was written by an AI agent, under the technical guidance and supervision of Flakeforever. This project demonstrates the potential of agentic AI in building functional, security-conscious mobile applications.
| Unlock Screen | Device Info | Main Screen | Settings Screen |
|---|---|---|---|
 |
 |
 |
 |
KeePassSD is a "Read-Only" companion for your KeePass (.kdbx) database. It is designed with a specific philosophy: Minimalism + Physical Security.
- Read-Only: The app only reads your database. It cannot modify, delete, or create entries. This ensures the integrity of your master vault.
- Credential Sender: Instead of copy-pasting (which is vulnerable to clipboard sniffers), KeePassSD sends your credentials to a remote computer via a physical USB HID Emulation device.
- Bluetooth LE: The app communicates with the hardware bridge over an encrypted BLE connection.
- Zero-Modification Policy: Protects your database from accidental corruption.
- Hardware Bridge: Emulates a USB keyboard to "type" your passwords into any OS without drivers.
- YubiKey Integration: Supports YubiKey Challenge-Response (KDBX 3/4) via the Key Driver by Kunzisoft.
- Offline First: Designed to operate in air-gapped or restricted environments.
- Neumorphic Design: A premium, modern UI built with custom Jetpack Compose tokens.
To use the "Send" functionality, you need a hardware bridge:
- MCU: Any ESP32-S3 development board (supports native USB HID).
- Tested Device: Waveshare ESP32-S3-GEEK.
- Firmware: The device must run our open-source CircuitPython bridge script (available in the
/hardwaredirectory).
- Maintenance: Use KeePassXC or KeePassDX to manage your database.
- Setup:
- Install the Kunzisoft Key Driver if using a YubiKey.
- Flash your ESP32-S3 with the bridge script.
- Usage:
- Open your
.kdbxfile in KeePassSD. - Pair with "KPB-Bridge" over Bluetooth.
- Select an entry and tap Send Password.
- Open your
KeePassSD is designed for users who prioritize physical security. By hardware-emulating a keyboard, it bypasses the need for shared clipboards or network-based credential sync, making it resilient against software-based keyloggers on the target machine.
This project is licensed under the Apache License 2.0. See the LICENSE file for details.
Maintained by Flakeforever | Powered by AI