package icon

Monica F-Droid

Open-source password manager: local encryption, autofill, TOTP, Passkey
New in version 1.0.322
Fix notes showing MDK| ciphertext after nearby sync or database archive restore; affected notes are restored after unlock.
Keep HOTP order after Generate Next; compact OTP tiles.
Wallet multiselect: collapse/expand card stacks and drag collapsed stacks to reorder.
Faster password list loading and scrolling.
Direct Root authorization as a Shizuku alternative for accessibility recovery and the default password manager.
Monica is a local-first password manager built with modern Android technologies (Jetpack Compose, Material 3). This is the F-Droid build: it contains no Google Play Services and no proprietary SDKs.

Credential management
* Zero-knowledge vault: AES-256-GCM encryption keyed by your master password (PBKDF2), wrapped by the Android Keystore (TEE/SE)
* Store passwords, secure notes, bank cards, ID documents, billing addresses, Wi-Fi and SSH keys
* Password generator, strength analysis (zxcvbn), breach-style security analysis
* Recycle bin, entry history, snapshots

Two-factor authentication
* Built-in TOTP/HOTP authenticator with 2-column code grid
* Steam Guard support (optional integration; only contacts Steam servers when you use it)
* Post-fill one-tap code popup after autofill

Autofill & Passkeys
* System autofill service with overlay picker and inline suggestions
* Dedicated input-method (keyboard) autofill with biometric unlock
* Passkey provider for Android 14+ (create and use passkeys from other apps)

Sync & backup — your cloud, your rules
* WebDAV sync and encrypted backups (Nextcloud, Synology, self-hosted)
* KeePass (.kdbx) read/write compatibility
* Bitwarden account import/sync (works with self-hosted Vaultwarden)
* Encrypted local backups with optional auto-backup
* Plain-HTTP WebDAV is blocked by default and requires an explicit opt-in per app settings

F-Droid build notes
* OneDrive/Google Drive cloud sync and SMS autofill (Play Services based) are removed in this build
* The native MDBX database engine is compiled from source during the F-Droid build
* Optional Steam integration connects to Steam's own servers, declared as NonFreeNet

Permissions
Camera is used only for QR code scanning. Biometrics are used only for local vault unlock. No analytics, no tracking, no ads.
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot
  • app screenshot

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 1.0.322 (29) suggested Added on Oct 29, 2026

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 8.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • android.permission.BIND_AUTOFILL_SERVICE
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • change network connectivity
      Allows the app to change the state of network connectivity.
    • allow Wi-Fi Multicast reception
      Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "connectedDevice"
      Allows the app to make use of foreground services with the type "connectedDevice"
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • hide other apps overlays
      This app can request that the system hides overlays originating from apps from being shown on top of it.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • android.permission.POST_PROMOTED_NOTIFICATIONS
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read image files from shared storage
      Allows the app to read image files from your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • request install packages
      Allows an application to request installation of packages.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • control vibration
      Allows the app to control the vibrator.
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • moe.shizuku.manager.permission.API_V23
    • takagi.ru.monica.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 60 MiB PGP Signature | Build Log

    • New in version 1.0.321
    Bitwarden org/attachments; keys/edits kept.
    Folder move/copy (same Bitwarden account).
    Local raw manager; confirm deletions.
    Fix sync retries, fill/package/WebView matches, expiry cursor, OTP resume.
    M3E/Accessibility fill.
    Unified credentials/OTP notes; compact templates.
    URL rules; scaled menus/corners. #171
    Member/rewards/travel; QR/barcodes. #169
    Fix KeePass duplicates.
    Mask card/notes; fix QR underlines.
    Top sync status; wait/retry/cancel.
    Confirm unpair; review deletions or keep local.
  • Version 1.0.321 (28) - Added on Oct 25, 2026

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 8.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • android.permission.BIND_AUTOFILL_SERVICE
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • change network connectivity
      Allows the app to change the state of network connectivity.
    • allow Wi-Fi Multicast reception
      Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "connectedDevice"
      Allows the app to make use of foreground services with the type "connectedDevice"
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • hide other apps overlays
      This app can request that the system hides overlays originating from apps from being shown on top of it.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • android.permission.POST_PROMOTED_NOTIFICATIONS
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read image files from shared storage
      Allows the app to read image files from your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • request install packages
      Allows an application to request installation of packages.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • control vibration
      Allows the app to control the vibrator.
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • moe.shizuku.manager.permission.API_V23
    • takagi.ru.monica.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 60 MiB PGP Signature | Build Log

    • New in version 1.0.320
    Name parts, address and home/work contacts. Unified wallet cards/forms; fixed text/photo clipping. Autofill sections, selects, phones, dynamic forms; strong biometrics/Monica password only, no device PIN; keys/data kept. Safer fill/save, updates, multi-step login, cache, OTP, accessibility; lock closes save screens. Bank branch; OTP issuer names; Bitwarden Auth. CSV. Database pane selection, menus, MDBX transfers. Nearby sync keeps folder/root files, labels, ownership. IDE Rust discovery.
  • Version 1.0.320 (27) - Added on Oct 22, 2026

    arm64-v8a armeabi-v7a x86_64

    This version requires Android 8.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • view network connections
      Allows the app to view information about network connections such as which networks exist and are connected.
    • view Wi-Fi connections
      Allows the app to view information about Wi-Fi networking, such as whether Wi-Fi is enabled and name of connected Wi-Fi devices.
    • android.permission.BIND_AUTOFILL_SERVICE
    • take pictures and videos
      This app can take pictures and record videos using the camera while the app is in use.
    • change network connectivity
      Allows the app to change the state of network connectivity.
    • allow Wi-Fi Multicast reception
      Allows the app to receive packets sent to all devices on a Wi-Fi network using multicast addresses, not just your phone. It uses more power than the non-multicast mode.
    • run foreground service
      Allows the app to make use of foreground services.
    • run foreground service with the type "connectedDevice"
      Allows the app to make use of foreground services with the type "connectedDevice"
    • run foreground service with the type "dataSync"
      Allows the app to make use of foreground services with the type "dataSync"
    • run foreground service with the type "specialUse"
      Allows the app to make use of foreground services with the type "specialUse"
    • hide other apps overlays
      This app can request that the system hides overlays originating from apps from being shown on top of it.
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • show notifications
      Allows the app to show notifications
    • android.permission.POST_PROMOTED_NOTIFICATIONS
    • read the contents of your shared storage
      Allows the app to read the contents of your shared storage.
    • read image files from shared storage
      Allows the app to read image files from your shared storage.
    • run at startup
      Allows the app to have itself started as soon as the system has finished booting. This can make it take longer to start the phone and allow the app to slow down the overall phone by always running.
    • ask to ignore battery optimizations
      Allows an app to ask for permission to ignore battery optimizations for that app.
    • request install packages
      Allows an application to request installation of packages.
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • control vibration
      Allows the app to control the vibrator.
    • prevent phone from sleeping
      Allows the app to prevent the phone from going to sleep.
    • modify or delete the contents of your shared storage
      Allows the app to write the contents of your shared storage.
    • moe.shizuku.manager.permission.API_V23
    • takagi.ru.monica.fdroid.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

    Download APK 60 MiB PGP Signature | Build Log

Find Apps