Monica F-Droid
Open-source password manager: local encryption, autofill, TOTP, Passkey
JoyinJoester Password & 2FA Security
Screenshots
Description
Monica is a local-first password manager built with modern Android technologies (Jetpack Compose, Material 3). This is the F-Droid build: it contains no Google Play Services and no proprietary SDKs.
Credential management
* Zero-knowledge vault: AES-256-GCM encryption keyed by your master password (PBKDF2), wrapped by the Android Keystore (TEE/SE)
* Store passwords, secure notes, bank cards, ID documents, billing addresses, Wi-Fi and SSH keys
* Password generator, strength analysis (zxcvbn), breach-style security analysis
* Recycle bin, entry history, snapshots
Two-factor authentication
* Built-in TOTP/HOTP authenticator with 2-column code grid
* Steam Guard support (optional integration; only contacts Steam servers when you use it)
* Post-fill one-tap code popup after autofill
Autofill & Passkeys
* System autofill service with overlay picker and inline suggestions
* Dedicated input-method (keyboard) autofill with biometric unlock
* Passkey provider for Android 14+ (create and use passkeys from other apps)
Sync & backup — your cloud, your rules
* WebDAV sync and encrypted backups (Nextcloud, Synology, self-hosted)
* KeePass (.kdbx) read/write compatibility
* Bitwarden account import/sync (works with self-hosted Vaultwarden)
* Encrypted local backups with optional auto-backup
* Plain-HTTP WebDAV is blocked by default and requires an explicit opt-in per app settings
F-Droid build notes
* OneDrive/Google Drive cloud sync and SMS autofill (Play Services based) are removed in this build
* The native MDBX database engine is compiled from source during the F-Droid build
* Optional Steam integration connects to Steam's own servers, declared as NonFreeNet
Permissions
Camera is used only for QR code scanning. Biometrics are used only for local vault unlock. No analytics, no tracking, no ads.
What’s new (1.0.320)
Name parts, address and home/work contacts. Unified wallet cards/forms; fixed text/photo clipping. Autofill sections, selects, phones, dynamic forms; strong biometrics/Monica password only, no device PIN; keys/data kept. Safer fill/save, updates, multi-step login, cache, OTP, accessibility; lock closes save screens. Bank branch; OTP issuer names; Bitwarden Auth. CSV. Database pane selection, menus, MDBX transfers. Nearby sync keeps folder/root files, labels, ownership. IDE Rust discovery.
Anti-features
Properties of this app that are worth knowing about before installing.
- NonFreeNet
Versions
Permissions
What the app asks the system for. Android only grants sensitive access after you confirm it.
- BiometricsUnlock with fingerprint or face.
- FingerprintUnlock with a fingerprint.
- HIDE_OVERLAY_WINDOWS
- CameraTake photos and videos.
- Internet accessSend and receive data over the internet.
- Network stateCheck whether and how the device is connected.
- Wi-Fi stateRead information about the Wi-Fi connection.
- CHANGE_WIFI_MULTICAST_STATE
Show 18 more permissions
- Install appsStart the installation of other apps.
- Read storageRead files on the device storage.
- Write storageCreate and change files on the device storage.
- PhotosRead images from the media library.
- BIND_AUTOFILL_SERVICE
- VibrationControl the vibration alert.
- Foreground serviceKeep running in the background, visible in the status bar.
- FOREGROUND_SERVICE_DATA_SYNC
- FOREGROUND_SERVICE_CONNECTED_DEVICE
- Change networkChange network connections.
- Run at startupStart automatically after the device is switched on.
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
- FOREGROUND_SERVICE_SPECIAL_USE
- NotificationsShow notifications.
- POST_PROMOTED_NOTIFICATIONS
- Prevent sleepingKeep the device from going to sleep.
- fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- permission.API_V23
Comments