PassMan

A password manager and encrypted-notes vault for Android, with a native Kotlin autofill service.

CategoryAndroid & Mobile Apps
Timeline2024
ContextProduct build · Solo
StatusLive on Play Store
PassMan vault
AESencryption at rest
Systemautofill across apps and sites
Multidevice sync through Firestore

The product

PassMan is a password manager on Google Play: an AES-encrypted vault and notes, device unlock with biometrics or a PIN, and sync through Firestore.

The native part is a Kotlin implementation of Android's Autofill Service that matches saved logins by app package or web domain, plus a Kotlin platform channel to EncryptedSharedPreferences.

Under the hood

THE ENGINEERING

  • 01

    Android Autofill Service in Kotlin that matches saved logins by app package or web domain

  • 02

    Entries encrypted with AES-256-CBC under a random per-user data key wrapped by the master password, so a password change re-wraps one key

  • 03

    Local sqflite store synced with Firestore through one unified database layer

  • 04

    Clean Architecture (data, domain and presentation layers with use cases) and BLoC

Next case study

Composer →