CyberPass FOSS

CyberPass FOSS v1.0.3

First updated FOSS release of CyberPass, an offline-first Android password manager.

Security Architecture

• Key Derivation: Master password hashed using PBKDF2-HMAC-SHA256 (600,000 iterations).
• Memory Management: Derived encryption keys zeroed in RAM immediately upon vault locking.
• Auto-Lock: Locks vault via ProcessLifecycleOwner on app suspension or after 15 minutes of inactivity.
• Clipboard Protection: Auto-wipes credentials after 45 seconds; applies Android 13+ sensitive content flags.
• Screen Security: Hardened with FLAG_SECURE to block screenshots and task previews.
• Backups: Standalone encrypted JSON exports (includes salt, verifier, and iteration metadata).

Android Integration

• Autofill: System-wide AutofillService integration with local domain matching.
• UI/UX: Vault categorization (Logins, Cards, Notes, Favorites) and monospace field typography (JetBrains Mono).

Build & Compatibility

• Configured for reproducible builds targeting third-party FOSS build infrastructure (F-Droid).

Links

• Source & Issues: GitHub Repository
• Contact: cybercastle.dev

---

Update to v1.0.3: Applied requested fixes (for IzzyOnDroid release) in release v1.0.3 (renamed icon to icon.png and disabled dependenciesInfo in Gradle). Updated APK is attached to the release.

---

Thank you for trusting CyberPass with your most sensitive information.