Ghost Auth Manager logo
Updated v3.0.0 Stable Security & Identity

Ghost Auth Manager

Ultra-secure, zero-knowledge password, passkey & 2FA vault for all Android screens.

in.sddev.ghost_auth_manager

App Screenshots

What's New in v3.0.0
Released September 2026

v3.0.0 v3.0.0 release: Native Android Autofill framework, Passkeys (FIDO2 / WebAuthn), Bluetooth HID hardware typing, RFC 6238 TOTP authenticator, on-device OCR card scanning, and adaptive UI across Watch, Phone, Tablet, and TV.

Overview & Sovereign Architecture

Ultra-secure, zero-knowledge password, passkey & 2FA vault for all Android screens.

A modern, privacy-first authentication vault built with Flutter. Engineered with an uncompromising zero-knowledge architecture, it combines hardware-backed SQLCipher encryption, system-level Android Autofill, Passkeys (FIDO2/WebAuthn), Bluetooth HID hardware typing, RFC 6238 TOTP 2FA, and live camera OCR across smartwatches (Wear OS), phones, foldables, tablets, and Android TV.

Core Capabilities & Features

SQLCipher 256-bit AES database encryption with hardware-backed Android KeyStore & FLAG_SECURE anti-screenshot protection

Native Android Autofill Framework integration (GhostAutofillService) for seamless domain and app package credential suggestions

Native Passkey Provider (FIDO2 / WebAuthn) powered by Android Credential Manager API (API 34+) for passwordless authentication

Bluetooth HID hardware keyboard emulation to wirelessly inject credentials into PC, Mac, Linux, and Android TV without clipboard monitoring

RFC 6238 TOTP 2FA authenticator with camera QR scanner supporting otpauth:// and Google Authenticator migration formats

Digital identity cards wallet with 100% on-device Google ML Kit Text Recognition live camera OCR

User-controlled encrypted cloud & offline backups via Google Drive AppData, Dropbox, or local files with WorkManager scheduling

Full-spectrum adaptive UI tailored for Wear OS smartwatches, smartphones, foldables, tablets, and Android TV

Zero telemetry, zero analytics tracking, zero ads, and no external account required

Permission Transparency

In accordance with our zero-telemetry policy, every Android permission is strictly declared and purpose-bound with 100% on-device processing:

BLUETOOTH_CONNECT

Connects to paired target devices (PC, Mac, TV) for Bluetooth HID keyboard injection

BLUETOOTH_ADVERTISE

Advertises Bluetooth LE HID peripheral service so nearby computers can discover and pair

CAMERA

Scans 2FA TOTP setup QR codes and performs on-device OCR for digital ID cards

USE_BIOMETRIC

Authenticates user locally via hardware biometric sensors (fingerprint/face) to decrypt master vault

QUERY_ALL_PACKAGES

Enables system Autofill framework to associate installed Android apps with vault credentials

POST_NOTIFICATIONS

Displays progress notifications for scheduled vault backup and sync tasks (Android 13+)

FOREGROUND_SERVICE

Maintains uninterrupted execution for scheduled background backups via WorkManager

INTERNET

Strictly for user-directed Google Drive and Dropbox encrypted backups. Zero credential data sent to SDDEV

READ_EXTERNAL_STORAGE

Legacy storage permission for Android 12 and below (API ≤ 32) to select offline backup files

WRITE_EXTERNAL_STORAGE

Legacy storage permission for Android 9 and below (API ≤ 29) to save exported offline backup files

1 / 1