Monica F-Droid
Open-source password manager: local encryption, autofill, TOTP, Passkey
JoyinJoester Password & 2FA Security
Screenshots
Description
Monica is a local-first password manager built with modern Android technologies (Jetpack Compose, Material 3). This is the F-Droid build: it contains no Google Play Services and no proprietary SDKs.
Credential management
* Zero-knowledge vault: AES-256-GCM encryption keyed by your master password (PBKDF2), wrapped by the Android Keystore (TEE/SE)
* Store passwords, secure notes, bank cards, ID documents, billing addresses, Wi-Fi and SSH keys
* Password generator, strength analysis (zxcvbn), breach-style security analysis
* Recycle bin, entry history, snapshots
Two-factor authentication
* Built-in TOTP/HOTP authenticator with 2-column code grid
* Steam Guard support (optional integration; only contacts Steam servers when you use it)
* Post-fill one-tap code popup after autofill
Autofill & Passkeys
* System autofill service with overlay picker and inline suggestions
* Dedicated input-method (keyboard) autofill with biometric unlock
* Passkey provider for Android 14+ (create and use passkeys from other apps)
Sync & backup — your cloud, your rules
* WebDAV sync and encrypted backups (Nextcloud, Synology, self-hosted)
* KeePass (.kdbx) read/write compatibility
* Bitwarden account import/sync (works with self-hosted Vaultwarden)
* Encrypted local backups with optional auto-backup
* Plain-HTTP WebDAV is blocked by default and requires an explicit opt-in per app settings
F-Droid build notes
* OneDrive/Google Drive cloud sync and SMS autofill (Play Services based) are removed in this build
* The native MDBX database engine is compiled from source during the F-Droid build
* Optional Steam integration connects to Steam's own servers, declared as NonFreeNet
Permissions
Camera is used only for QR code scanning. Biometrics are used only for local vault unlock. No analytics, no tracking, no ads.
What’s new (1.0.318)
Optional 2-minute autofill, off by default; revoked on lock/task removal; separate main-app lock.
Suggestions: bank details, labels, URLs, issuers, names, addresses.
Clear data progress; faster deduplication with rollback/cancel.
Preserve hidden app metadata; CLI defers Glitter.
Compact M3E wallet editors with saved drag order.
Retry startup reads without reset; improve diagnostics.
KDBX bulk delete saves once, updates lists together, and guards stale snapshots and concurrent saves.
Anti-features
Properties of this app that are worth knowing about before installing.
- NonFreeNet
Versions
Permissions
What the app asks the system for. Android only grants sensitive access after you confirm it.
- BiometricsUnlock with fingerprint or face.
- FingerprintUnlock with a fingerprint.
- HIDE_OVERLAY_WINDOWS
- CameraTake photos and videos.
- Internet accessSend and receive data over the internet.
- Network stateCheck whether and how the device is connected.
- Install appsStart the installation of other apps.
- Read storageRead files on the device storage.
Show 14 more permissions
- Write storageCreate and change files on the device storage.
- PhotosRead images from the media library.
- BIND_AUTOFILL_SERVICE
- VibrationControl the vibration alert.
- Foreground serviceKeep running in the background, visible in the status bar.
- FOREGROUND_SERVICE_DATA_SYNC
- Run at startupStart automatically after the device is switched on.
- REQUEST_IGNORE_BATTERY_OPTIMIZATIONS
- FOREGROUND_SERVICE_SPECIAL_USE
- NotificationsShow notifications.
- POST_PROMOTED_NOTIFICATIONS
- Prevent sleepingKeep the device from going to sleep.
- fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
- permission.API_V23
Comments