Keyholm
Single-device passkeys on secure hardware
新版本 0.0.5
This release has one big change:
- Keyholm now always encrypts its metadata at rest
- App data from previous versions is migrated
Otherwise UI & stability improvements and APK size optimizations.
- Keyholm now always encrypts its metadata at rest
- App data from previous versions is migrated
Otherwise UI & stability improvements and APK size optimizations.
Keyholm is all about single-device passkeys (i.e. client-side discoverable credentials) whose private key is protected by secure hardware.
You can never export or sync these passkeys. Think of Keyholm as a way to activate the built-in security key on your phone.
You can never export or sync these passkeys. Think of Keyholm as a way to activate the built-in security key on your phone.
- target devices: phones with secure hardware (including Pixels)
- no INTERNET permission
- no Google Play Services ever
- takes advantage of latest Android version/APIs
- allows extensive control over particulars of what credentials it creates and how
- supports ES256: it's the only EC, StrongBox-backed algorithm
- supports Ed25519: it's not NIST, it's fast and safe but TEE-only
- supports ML-DSA: post-quantum! but Android 17 and TEE-only
- supports android-key attestation
- supports PRF extension
- uses QUERY_ALL_PACKAGES in order to display icons for apps that were denied passkey usage
- account list export/import for making it marginally easier to switch devices. All keys still need to be manually recreated on the new device!
捐赠
版本
尽管下面提供了 APK 安装包的下载选项，但你应该注意，以这种方式安装将不会收到更新通知，这是一种不太安全的下载方式。 我们建议你安装使用 F-Droid 客户端。
下载 F-Droid-
arm64-v8aarmeabi-v7ax86x86_64该版本需要 Android ? 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
-
arm64-v8aarmeabi-v7ax86x86_64该版本需要 Android ? 及以上版本。
此包由原始开发者构建并签名，并保证对应于此源代码 tarball。
新版本 0.0.4
Keyholm's first release on fdroid! It's quite feature complete already when it comes to single-device passkeys:
- Passkey creation/use as an Android passkey service
- Passkey management
- Extensive settings for configuring exactly how to create/use your passkeys
- PRF support
- Passkey list export/import
- Icon pack support
- Editable RP name, username and display name
- Non-discoverable passkeys
This should be the same as v0.1, which will be the first release with backwards compatibility.
- Passkey creation/use as an Android passkey service
- Passkey management
- Extensive settings for configuring exactly how to create/use your passkeys
- PRF support
- Passkey list export/import
- Icon pack support
- Editable RP name, username and display name
- Non-discoverable passkeys
This should be the same as v0.1, which will be the first release with backwards compatibility.