Monica F-Droid

Monica F-Droid

Open-source password manager: local encryption, autofill, TOTP, Passkey

JoyinJoester Password & 2FA Security

Download (57 MB)

Screenshots

Screenshot of Monica F-Droid Screenshot of Monica F-Droid Screenshot of Monica F-Droid Screenshot of Monica F-Droid Screenshot of Monica F-Droid

Description

Monica is a local-first password manager built with modern Android technologies (Jetpack Compose, Material 3). This is the F-Droid build: it contains no Google Play Services and no proprietary SDKs.

Credential management
* Zero-knowledge vault: AES-256-GCM encryption keyed by your master password (PBKDF2), wrapped by the Android Keystore (TEE/SE)
* Store passwords, secure notes, bank cards, ID documents, billing addresses, Wi-Fi and SSH keys
* Password generator, strength analysis (zxcvbn), breach-style security analysis
* Recycle bin, entry history, snapshots

Two-factor authentication
* Built-in TOTP/HOTP authenticator with 2-column code grid
* Steam Guard support (optional integration; only contacts Steam servers when you use it)
* Post-fill one-tap code popup after autofill

Autofill & Passkeys
* System autofill service with overlay picker and inline suggestions
* Dedicated input-method (keyboard) autofill with biometric unlock
* Passkey provider for Android 14+ (create and use passkeys from other apps)

Sync & backup — your cloud, your rules
* WebDAV sync and encrypted backups (Nextcloud, Synology, self-hosted)
* KeePass (.kdbx) read/write compatibility
* Bitwarden account import/sync (works with self-hosted Vaultwarden)
* Encrypted local backups with optional auto-backup
* Plain-HTTP WebDAV is blocked by default and requires an explicit opt-in per app settings

F-Droid build notes
* OneDrive/Google Drive cloud sync and SMS autofill (Play Services based) are removed in this build
* The native MDBX database engine is compiled from source during the F-Droid build
* Optional Steam integration connects to Steam's own servers, declared as NonFreeNet

Permissions
Camera is used only for QR code scanning. Biometrics are used only for local vault unlock. No analytics, no tracking, no ads.

What’s new (1.0.307)

* IME: Chinese entries now indexed and sorted by pinyin initial letter
* Export: backup password dialog now prompts when exporting ZIP with passkeys
* Based on upstream 1.0.307

Anti-features

Properties of this app that are worth knowing about before installing.

  • NonFreeNet

Versions

Version Date Size Requires Android Download
1.0.307 current
375bd743de337c90…
 2026-09-07 57 MB API 26

Permissions

What the app asks the system for. Android only grants sensitive access after you confirm it.

  • BiometricsUnlock with fingerprint or face.
  • FingerprintUnlock with a fingerprint.
  • CameraTake photos and videos.
  • Internet accessSend and receive data over the internet.
  • Network stateCheck whether and how the device is connected.
  • Install appsStart the installation of other apps.
  • Read storageRead files on the device storage.
  • Write storageCreate and change files on the device storage.
Show 9 more permissions
  • PhotosRead images from the media library.
  • BIND_AUTOFILL_SERVICE
  • VibrationControl the vibration alert.
  • Foreground serviceKeep running in the background, visible in the status bar.
  • FOREGROUND_SERVICE_SPECIAL_USE
  • NotificationsShow notifications.
  • Prevent sleepingKeep the device from going to sleep.
  • Run at startupStart automatically after the device is switched on.
  • fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Comments