Skip to content

Add password manager with Android autofill, master key encryption, and tooltip accessibility#47

Merged
ultraelectronica merged 64 commits into
mainfrom
versionF
Jun 20, 2026
Merged

Add password manager with Android autofill, master key encryption, and tooltip accessibility#47
ultraelectronica merged 64 commits into
mainfrom
versionF

Conversation

@ultraelectronica

@ultraelectronica ultraelectronica commented Jun 20, 2026

Copy link
Copy Markdown
Member

Summary

Adds a complete password manager with Android autofill service, master key-based encryption with key wrapping and biometric unlock, and extensive tooltip accessibility improvements.

Changes

Password Manager

  • Add PasswordEntry and PasswordContent models with JSON serialization and encryption metadata
  • Add password management providers with Riverpod
  • Add password editor screen
  • Add password list screen with search, filtering, and multi-select
  • Add password entry card widget
  • Add password generator sheet widget
  • Add password service with encryption and vault integration
  • Add clipboard utility with auto-clear functionality
  • Add password vault registration methods
  • Include password index in vault backup
  • Add password list navigation to vault explorer

Android Autofill

  • Add autofill service for credential management
  • Add AutofillCallbackHolder to manage autofill callbacks
  • Add AutofillSelectionActivity for credential selection UI
  • Add AutofillApp entry point widget
  • Add autofill suggestion layout XML
  • Add autofill service metadata resource
  • Add AutofillService and user-facing autofill entry point

Master Key & Encryption

  • Implement key wrapping and biometric unlock for master keys
  • Unlock master key during vault authentication
  • Integrate EncryptionService into authentication flows
  • Re-wrap encryption key after password/PIN change
  • Add onOpenPassword callback to FileOpenService
  • Add password vault integration to gallery screen
  • Update default encryption algorithm to AES-256-GCM
  • Increase PBKDF2 iterations to 600000
  • Check biometric availability before authenticating in autofill

UI & Accessibility

  • Add tooltips across media viewer, song player, password editor, and autofill screens
  • Replace GestureDetector with IconButton for autofill dismiss and folder selection
  • Add mounted checks before setState calls in async callbacks
  • Dispose controllers after dialog completion

Platform & Security

  • Add ProGuard rules for Flutter, crypto, and autofill service
  • Add Android data extraction and network security config (disable backup, enforce HTTPS)
  • Disable app backup, enable ProGuard minification for release builds
  • Add CI workflow for versionF branch

Cleanup

  • Remove deprecated compression services
  • Remove redundant file existence checks
  • Remove compression usage example file
  • Replace hardcoded SDK version with device_info_plus
  • Replace fluttertoast with SnackBar using global navigator key
  • Consolidate download directory to shared PathUtils

Testing

  • Add unit tests for AES-256-GCM and CTR encryption round-trips
  • Add PBKDF2 isolate test suite
  • Add tests for Argon2id KWK derivation and AES-256-GCM key wrapping
  • Add unit tests for crypto hygiene and password strength checks

@ultraelectronica
Bump version to 0.14.4-beta.5
4bb3ab3
@ultraelectronica
Add autofill service and selection activity to Android manifest
43a898b
@ultraelectronica
Add password list navigation to vault explorer
99aa6fe
@ultraelectronica
Include password index in vault backup
251cca0
@ultraelectronica
Add autofill entry point and password vault registration methods
a5320c1
@ultraelectronica
Add AutofillCallbackHolder to manage autofill callbacks
9f29d2d
@ultraelectronica
Add AutofillSelectionActivity for credential selection UI
13bda93
@ultraelectronica
Add autofill service for credential management
2911442
@ultraelectronica
Add autofill suggestion layout XML
c267955
@ultraelectronica
Add Android autofill service metadata resource
5bbe7a2
@ultraelectronica
Add PasswordEntry and PasswordContent models
45d3763 
Introduce core data classes for password management with JSON
serialization, copyWith methods, tag management, and encryption
metadata support.
@ultraelectronica
Add password management providers with Riverpod
3a60ab3
@ultraelectronica
Add autofill credential selection screen
b3e80f1
@ultraelectronica
Add password editor screen
40d403b
@ultraelectronica
Add password list screen with search, filtering, and multi-select
8cfbe97
@ultraelectronica
Add password service with encryption and vault integration
18d4f01
@ultraelectronica
Add clipboard utility with auto-clear functionality
7117215
@ultraelectronica
Add password entry card widget
ce69e17
@ultraelectronica
Add password generator sheet widget
1c766fe
@ultraelectronica
Add AutofillApp entry point widget
9d70019
@ultraelectronica
Remove dot and row wrapper from Active status indicator
a386a3d
@ultraelectronica
Disable app backup and add network security config
5ba2cde
@ultraelectronica
Remove TODO comment and enable ProGuard minification for release builds
fe33d18
@ultraelectronica
Remove compression usage example file
f9f0059
@ultraelectronica
Remove redundant file existence checks in album covers
41b1063
@ultraelectronica
Check biometric availability before authenticating in autofill
bc267eb 
Add biometric check before proceeding with local authentication
on the autofill selection screen. If biometrics are not enabled,
show a message indicating they are unavailable. After successful
biometric authentication, attempt to unlock the master key and
display an error if it fails.
@ultraelectronica
Re-wrap encryption key after password/PIN change
ee7c364
@ultraelectronica
Update KDF iteration options
4340e54
@ultraelectronica
Remove redundant file existence check in thumbnail builder
d5fc540
@ultraelectronica
Remove redundant file existence check in folder cover image
979a965 
Also dispose of text controllers in folder dialogs after completion
@ultraelectronica
Replace GestureDetector with IconButton for autofill dismiss
19aed75
@ultraelectronica
Add tooltips to song player screen buttons
874ebb2
@ultraelectronica
Remove redundant file existence check in image thumbnail
8c6ecc8
@ultraelectronica
Unlock master key during vault authentication
b828ce4
@ultraelectronica
Integrate EncryptionService into authentication flows
36264d0 
Add EncryptionService dependency to AuthService, setting pending
credentials during creation and verification of passwords, PINs, and
biometric setup. Update credential change operations to re-wrap keys
and remove biometric keys. Extract backup credential clearing into a
private helper method and increase KDF iterations from 100k to 600k.
Add lockout check during credential verification.
@ultraelectronica
Store pending credential and increase KDF iterations
cf9fecf 
Update PIN validation to require exactly 6 digits and integrate
pending credential flow with EncryptionService for both decoy PIN
and password operations. Increase default KDF iterations from
100000 to 600000. Clean up additional decoy key storage entries
when resetting decoy data.
@ultraelectronica
Implement key wrapping and biometric unlock for master keys
ca51787
@ultraelectronica
Remove deprecated compression services
da190e4 
The old `MediaCompressionService` relied on deprecated packages
and the `ImprovedCompressionService` has been superseded by the
new video compressor implementation using FFmpeg isolates.
@ultraelectronica
Replace hardcoded SDK version with device_info_plus
3fbee5b
@ultraelectronica
Update default encryption algorithm to AES-256-GCM and KDF iterations to
eabd51d 
600000
@ultraelectronica
Remove unused compression helper utility
91829d8
@ultraelectronica
Increase PBKDF2 iterations to 600000
65c8a45
@ultraelectronica
Store update subscription to cancel on dispose
47cc797
@ultraelectronica
Remove default Flutter widget test
6534329
@ultraelectronica
Replace cupertino_icons and encrypt with device_info_plus
817f20a 
- Remove example files from analysis
- Enable `avoid_print` lint rule
@ultraelectronica
Add CI workflow for versionF branch
509e8d9
@ultraelectronica
Add Android data extraction and network security config files
a2e2c03 
Both configurations disable cloud backup and device transfer, and
enforce
HTTPS-only network traffic on Android.
@ultraelectronica
Add ProGuard rules for Flutter, crypto, and autofill service
03ef152
@ultraelectronica
Add isolated Argon2id hash computation using compute()
0959482
@ultraelectronica
Add unit tests for AES-256-GCM and CTR encryption round-trips
528c43c
@ultraelectronica
Add tests for Argon2id KWK derivation and AES-256-GCM key wrapping
29dd18b
@ultraelectronica
Add PBKDF2 isolate test suite
d71085f
@ultraelectronica
Refactor toast system and unify path utilities
bd3ea0d 
- Replace fluttertoast with SnackBar using global navigator key
- Move download directory resolution to shared PathUtils class
- Consolidate file type icon/color helpers into FileTypeColors
- Remove now-unused allFilesProvider in favor of vaultNotifierProvider
- Add secure_compare utility for auth and decoy services
- Fix password validation to use AuthService constraints
- Adjust iOS keychain accessibility setting
@ultraelectronica
Add global navigator key
fadeb98
@ultraelectronica
Add centralized Android path resolution utility
16df3a2
@ultraelectronica
Add constant-time string comparison utility
43a6d0e
@ultraelectronica
Add unit tests for crypto hygiene and password strength checks
e54ef21
@ultraelectronica
Add password vault integration to gallery screen
393c1a5
@ultraelectronica
Add onOpenPassword callback to FileOpenService
f24e4ce
@ultraelectronica ultraelectronica merged commit 1ae0174 into main Jun 20, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ultraelectronica