Passa for Android™
Passa is a basic and flexible password manager for Android devices.
Features
- AES-128 encryption
- Backup/restore (encrypted)
- Import/export (editable Text/XML/CSV)
- Password generator
- Inactivity lock
- Manageable, simple interface
Download
If QR-code doesn't work, you can download Passa here (v1.4.0, for all Android versions).
Screenshots
 |
 |
Security Measures
- After idle-lock-duration of inactivity, the application locks itself and does not let any more operations.
- Password display dialogs close automatically after 30 seconds.
- Password edit dialogs close automatically after 2 minutes.
- If set, leaving the main window or pressing the back-key locks application.
Import/Export
You can import/export items as plain text, XML, or CSV. The encoding used for text and CSV is Unicode (UCS-2 Little Endian) and for XML is UTF-8.
Text import/export represents items as paragraphs and uses the first line of each paragraph as the title of the item.
Recommendations
- Encryption tools alone is not sufficient for good security. Use a powerful master password for application.
- Make a backup of your passwords, at least monthly or weekly.
- Use more powerful passwords for backups, since they are portable (unlike application's data, they do not reside always in your phone).
- Be careful with managing exported files, since they are not encrypted and can be viewed with any text editor.
Remarks
- The application is not suitable for storing large amounts of data as passwords.
- Uninstalling application or factory-resetting phone wipes all passwords. You can make backups to avoid data loss.
Internals
Passa uses a very simple XML format to structure items. Persistent storage is delegated to 8 size-balanced SharedPreferences instances and is always encrypted with 128-bit AES method ("PBEWithSHA1And128BitAES-CBC-BC" for 128-bit SecretKey generation, "AES" for Cipher). Settings are also encrypted. Since no dedicated database is employed, the application is not suitable for storing large amounts of data as passwords. External storage is used only for backup/restore/import/export facilities.
Disclaimer
The application is provided in the hope that it will be useful, but without any warranty of any kind.
FAQ
Q: Where in the phone are my passwords stored? And my master (application) password?
A: Passwords are stored as encrypted application settings in phone's memory.
Typical location of files is the directory: /data/data/com.ngc.passa/shared_prefs/.
Master (application) password is not stored anywhere (neither in phone nor in SD-card).
Q: I will change my phone. How can I transfer Passa contents?
A: Backup in your old phone and restore it in the new phone. All items will be transferred.
Q: What's the difference between a backup and an export?
A: While a backup is an encrypted special file format,
an export is an interchangeable/unencrypted file and can be viewed/edited with any text editor.
Q: How can import my passwords into Passa using Windows Notepad?
A: Create a new text file, write items as paragraphs (with the first line as the title of the item)
and select "Save as.." from File menu of Notepad.
Select "Unicode" from encoding drop-down list and save the file.
It's ready to import into Passa.
Q: Does updating application wipe my passwords?
A: No. Updating application does not wipe passwords.
However, if you first uninstall and install application anew, your passwords will be lost.
Q: I forgot my master (application) password. Is there a way to recover it?
A: No, there isn't. Passa does not contain any backdoors or deliberately introduced weaknesses.
Only way to recover master password is to remember (or guess) it.
We recommend delving into the zeitgeist of the time you set the password.
Q: Is application-password case-sensitive?
A: Yes, it is case-sensitive. Leading and trailing white-space characters (space, newline, tab, etc.) are ignored.
Android is a trademark of Google Inc. Use of this trademark is subject to Google Permissions.