sorz/tinykeepass

Another simple read-only KeePass Android app.

TinyKeePass

Another simple read-only KeePass Android app.

Only what I personally need are implemented, lacks lots of common functions, and possibly buggy.

Use KeePassDX for a full-feature experiences.

Google Play F-Droid

Features

• Fetch/update database from HTTP(S)/WebDav server, support HTTP basic auth.

• Remember master password, which is protected by Android Keystore System. (Cannot not-to-remember password, though)

• Fingerprint or screen lock support.

• Copy username and/or password to clipboard, with counting down on notification.

• Searching.

• Autofill on Oreo or above

• No support: any edit/delete operations, groups, display fields other than title, username, password, and URL.

• Android >= 7.0 (N)

Credits

• KeePass: the free, open source, light-weight and easy-to-use password manager.

• KeePassDX: KeePass implementation for android with material design and deluxe features.

tinykeepass's Issues

Last release lacks APK

Could it be you forgot to attach the .apk to the last (bugfix) release? If so, may I kindly ask to fill the gap? Thanks in advance!

App crashes when no match is found with the Autofill API

Works fine when it can find an entry but will crash otherwise.

Tested on:
Android 8.0 Pixel 2 XL
Android 8.1 Pixel XL

Incompatible with the popular Android devices

Related to #1. The app is incompatible with the popular Android devices currently in use such as Galaxy Grand Prime, Grand Prime Plus, J2, J1 Ace, and Oppo A37f due to min SDK 24 supported by the app. Therefore, the app is not available in the Play store on the aforementioned devices.

Crash when no file is given

Steps to reproduce:

• Press back on the file config page
• Pick unlock on the main menu

Could not deserialize object to XML

Hi, thank you for the great work on this. It's exactly what I was looking for. 😄

I have a KeePass file on Nextcloud that I'm accessing over WebDAV. At first everything worked fine, but then I added a few more accounts and now TinyKeePass cannot sync anymore. I added so many accounts at once, I'm not sure which caused it.

• At first I thought it was special characters in my passwords, so I changed everything back to alpha-numeric. Still no dice.
• Then I thought it was because I have files attached to some entries, so I deleted those. Didn't work.
• Finally, I thought that it had to do with the fact I'd recently changed the master password to something very long. I changed it back and still no success.
• I also tried killing the app and clearing data in case of any cache.

The same kdbx file works with KeeWeb and KeePass Tusk. I'm guessing the XML parser used in this project has a bug, or the parser used by these other projects is too lenient towards my potentially corrupted file.

EDIT: I downloaded the .kdbx locally to my phone and it still has the issue, so it's not related to WebDAV. KeePassDroid can also open the file.

app crashes when I click unlock

Expected behavior

I expected that when I click unlock I'll be able to unlock my database

Actual behavior

After using screenlock as my authentication option, loading a legit keepass file and clicking configure, I'm redirected to my lock, after using my finger print, it doesn't load, after pressing back and selecting unlock, the app crashes and it doesn't open again until I restart my phone.

How to reproduce

• goto keepass website
• download the keepass app for desktop
• on the desktop app create a keepass database
• download tiny keepass on mobile phone from fdroid
• allow all permissions if prompted
• send database created on PC to mobile phone
• launch tinykeepass
• load database file
• input master password that was used during creation of the database
• select authentication lock screen
• click configure
• press back button
• click unlock and app crashes

PS Use a mobile phone that is finger print enabled

---

• Device: Infinix Note 4
• Operating system: Android 8.1.0
• Software Version: 0.3.4

Recording Of The Bug

https://youtu.be/K6BIEhJWnhU

---

Posted on Utopian.io - Rewarding Open Source Contributors

---

Feature request: 2FA

two factor authorization code generator would be nice to have

Extend backwards compatibility to Marshmallow (API 23)

Are there going to be any regresions if you extend the compatibility for slightly older devices?

Screenshots for F-Droid

You can add Screenshots for F-Droid, too, if you want.

https://f-droid.org/en/docs/All_About_Descriptions_Graphics_and_Screenshots/

https://gitlab.com/snippets/1895688

crash when I click on the cloud icon to re-download the database

Thanks for the excellent app.

I have it configured to download my keepass file using an obscure URL over https without basic auth.

When I initially set things up - it downloads the file without a problem and everything works well.

However, after I update the file on the server, I click the red cloud icon in the bottom right corner to re-download the file and the app seems to crash.

In my notification bar, I get a message saying: "Fetching database" followed by what is the beginning of the URL to my keepass database and the constantly moving status bar that indicates that the download has not yet begun.

When I re-open TinyKeePass, my old entries are still available.

Next, I force stop TinyKeePass and, via Settings, clear all data. Then, I restart TinyKeePass, paste in the same Keepass database URL, and it downloads the file and works perfectly again.

Feature request: KeepassXC/Yubikey Challenge Response support

Hey, do you plan to support a Challenge Response mode of unlocking the database with Yubikey?

Thanks!

[Request] Support for KeePass 1.* databases

I'm using KeePassC on Linux. It's and old and unfortunately unmaintained Ncurses client and it only supports version 1.* databases.

It would be nice if this application would support them as well so I could use a more lightweight client on my phone.

ability to change location of keepass database

I can't figure out how to change the location of my keepass database after I have already configured it. I can go to Settings -> Apps and clear all data and start over again, but it would be nice if it was possible to do that from within the app.

External file over HTTPs not working

First of all: Great job with this app, I'm looking forward to see the final result!
The HTTP Basic Authentication made me WOW! Good job.
It's not working over HTTPS tho,
The following exception is shown on a Toast:
"SSLHandshakeException: java.security.cert.CertPathValidatorException: Trust anchor for certification path not found."
If I change the protocol from "https" to "http" it works flawlessly.
EDIT: Let me know if you want me to upload a simple kdbx file on my HTTPS website for testing purposes.

Only network access? Why?

I try URL "file://..." but the app dont ask permission so it's can't be granted

Im very disappointed about this...

DB unlocks without pass, even after reboot

After unlocking the DB it will automatically unlock with no pass after being minimised, which is great, as all other keepass apps keep locking even with timeouts etc unset, requiring repeated unlocking after switching from browser to keepass* to browser etc. Very annoying, and playing with battery settings etc. doesn't help.

However tinykeepass will also automatically unlock without a password after locking, and even after locking and rebooting my tablet - nvidia with android 7.

Any ideas?

Suggestion: Auto-refresh (or refresh on swipe down)

I made changes on the external file and wasn't able to reload it.
I even relaunched the app but nothing, so maybe add a refresh functionality?
Thank you in advance and good work.