OwnPush
We know that push messaging is a key tool for developers to keep users engaged with their apps/services and to deliver timely content. Right now there's little or no choice in the way of push services outside of Google Cloud Messaging (GCM), which is a problem if you value control and security or want to reach the billion-or-so users without access to Google Mobile Services on their devices. As a result of working on XDA Labs and a few other internal projects, we at Fastboot and XDA have built an alternative to GCM that we want to make generally available.
OwnPush is:
- End-to-end encrypted: With GCM, all messages go through Google, which acts as the gatekeeper between developer and user. We know that Android users value their privacy, and OwnPush messages are encrypted (seamlessly and by default) from the developer's server, all the way through to the end device. This means that we (and anyone else in the path) can't get into your push messages. Like it should be.
- Simple to use: Push messages can be delivered to any device running Android, whether tablet or phone. It works over Wifi or mobile data, and it's very simple to use. To aid in implementing OwnPush in your applications, we will be providing libraries for major backend platforms to help with handling the encryption and signing process.
- Battery-light: GMS is fairly heavy on the battery, as it's got a huge number of features tied together, including location logging and Google accounts. OwnPush is as lightweight as possible.
We are still finishing things off, but we're looking to start working with developers on helping them integrate OwnPush in their apps. In the spirit of XDA, we'll be making it open source, although we need to finalize the details. You'll be able to include our (tiny, open source, easy-to-read) library in your app, and the rest will come automatically. We'll be working on some simple integration guides for the server side, so it's easy to send push messages using almost anything.
Below is a high-level overview of how ownPush works.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
What can this be used for?
OwnPush has the capability to be the driving force behind some really cool ideas, from a fully open-source PC-to-phone push system, to building real-time secure messaging platforms. OwnPush can do everything that other options can do, and it's more secure to boot! OwnPush enables you to keep your users informed while not impacting battery life. We hope that the uses for OwnPush are limited only to your imagination.
Open source tools are easier to work with, tweak and play with, and learn from. There's no reason to use the proprietary Google Services library just to get push messages working! Coupled with XDA Labs, you can start to build an ecosystem without relying on Google at all, and without them being able to shut your developer account down!
About Fastboot Mobile
We're a small, venture-capital free business. No external influences or pressures on how we work. We're developers like you, and we believe in giving people a real choice.
If you're interested in this, and want to get involved and have a play, please let us know via the thread or our contact form. At the moment, we're also looking to raise awareness of the technology behind OwnPush to the wider community. Together, we can make the default for push messaging secure, and perhaps even bring about an end to sending "secure login tokens" via SMS messages! We're looking to bring OwnPush to as many people as possible, so if you (or your business) have a need for properly secure push messaging, please get in touch.
OwnPush Usage Examples
OwnPush Performance Examples
For an example of what OwnPush can offer regarding battery savings, we setup a test with a Nexus 9 over a 20hr period. The test application used OwnPush to keep alive a server connection (typical ping <-> pong) once every 4-5 minutes and a push notification randomly sent every 2-10 minutes
Nexus 9 CPU usage over 20hrs running OwnPush
Application Resource usage
Google Services Resource usage over same time period
This looks great, thank you . The one thing I don't see mentioned anywhere is the possibility of self hosted servers. Is this something which you currently have plans for? I think it would be a bit odd to offer such a great decoupling from Google, only to replace that coupling with Fastboot Mobile. The option of self hosted push servers is even more critical when you think of the possible issues Fastboot Mobile may face down the line. With no obvious business model, what guarantee do we as developers have that the ownPush servers will still be around 2yrs from now? GCM on the other hand is backed by Android developers themselves, and has become such a critical infrastructure that we're essentially guaranteed its existence for years/decades.
Edit: The developer talked about this on reddit. You can find the discussion here: https://www.reddit.com/r/Android/comments/440euy/ownpush_open_source_endtoend_encrypted_push/czmfgnl
Where can I follow the progress of this project? Sorry, I am new to XDA. Thanks.
Sent from my Nexus 7 using Tapatalk
What license is planned? LGPL or Apache2?
Exciting news!
Very exciting, looking forward to testing this !
evilSquirrel said:
Where can I follow the progress of this project? Sorry, I am new to XDA. Thanks.
Sent from my Nexus 7 using Tapatalk
Click to expand...
Click to collapse
I would guess that this thread would hold that information in the future too
evilSquirrel said:
Where can I follow the progress of this project? Sorry, I am new to XDA. Thanks.
Click to expand...
Click to collapse
We'll keep this thread updated as appropriate.
jumoog said:
What license is planned? LGPL or Apache2?
Click to expand...
Click to collapse
We will be releasing under LGPL (version TBD).
OwnPush Demo Applications
Hello All,
We are happy to provide some more information about OwnPush today
Everyone involved with OwnPush has been hard at work getting the service to a level that we can demonstrate to the world, this has ended in the creation of two demo applications that we have published over the weekend.
These demo apps are as follows :-
RSS Demo
An RSS web service and corresponding android application, the webservice checks the RSS feed (BBC World News) rapidly and when a new item becomes available it is pushed with a link to the android application over OwnPush. The android application then shows the notification to the user. This demo shows the power savings that can be gained by using OwnPush.
OTP Demo
This demo is constructed from a simple web service and its android application counterpart. This makes use of the secure nature of OwnPush to send fast, safe, and secure passwords to an Android device. After the apk is installed & registered on the android device the user is shown a short, unique device ID that they can enter on a simple web form. On submission of this form the OTP is randomly generated and sent to the device securely.
For both of these demo applications we have published APKs for you to install and the code for the web services and android app (allowing any developers an insight into how they can implement OwnPush when it is fully available)
To find out more about these demo applications please visit our website demo.ownpush.com
I have been searching for a replacement to GCM and I would like to say thank you and that this is amazing, i cannot wait to start using it!
universelove said:
I have been searching for a replacement to GCM and I would like to say thank you and that this is amazing, i cannot wait to start using it!
Click to expand...
Click to collapse
We're excited to be able to let the cat out of the bag, so to speak. Please reach out via our website so we can stay in contact. In addition, check out our GitHub for more information about the demos, implementation, etc.
I guess since there hasn't been any code changes on Github in 3 months I guess this project is dead?
Sandman-007 said:
I guess since there hasn't been any code changes on Github in 3 months I guess this project is dead?
Click to expand...
Click to collapse
Nope the project is far from dead, we have been working internally to get a full demo system up and running. We have also supplied test accounts and app registration information to a handful of developers to get some feedback on how we can improve the current system (outside of normal bugfixes ect.)
We have also worked on testing with the new doze implementation on N and general stability fixes within the android service
If anyone is looking for more information on OwnPush please don't hesitate to drop me a line via PM on her
I am currently using CM 12.1 GApps-free and microG as alternative to GApps. microG seems to have GCM functionality. Is this app works well with microG?
will you develop plugin for Unity to all mobile platforms?
Can work push other app notify or not? Thanks,,,
Any more developers/users want to see a new push service
after come across own-push, I'd like to make a push service or continue with something working
as a contractor, some of my Europe clients ( startups ) really want to find a clean google free app.
at the quality of commercial pushy. Yet, free and well-known will be better.
as a developer, I want to add iOS + web push support so that no need to manage too many platforms.
single server to server API + end-to-end encrypted by a good algorithm to ensure no MITM issue.
use UDP will be even more battery friendly
make a tiny open source service possibly acceptable by major open ROMs , so all apps share same socket and same service.
or as a short term goal, the first app start the service; other apps connect to it. ( concept borrowed from github.com/vieux/OpenUDID )
Related
Hi guys .. this is my first post ...
11 features of Android 4.4 Kitkat
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
First what is Kitkat :It is an android version which was released after Jelly bean ........ The latest version of android tooo
Many of them will have seen ...... Jelly bean and Ice cream sandwich .....
But this kitkat is very special and fullly Themed ..... :silly:
Google has confirmed that Android 4.4 KitKat will be the next edition of the world's most popular smartphone operating system.
The next version of Android was widely tipped to be known as Android 5.0 Key Lime Pie, but after some deliberation Google opted for a more recognisable name confirmed the change after reaching a deal with Nestle.
Features and release date of Android 4.4 KitKat are yet to be released, but the mobile OS is expected to arrive before the end of the year, mostly likely debuting on the next Nexus branded handset.
I had compiled a list of 12 other improvements we'd like to see in Android 4.4. Do you agree? Are there any features you'd like to see Google introduce? Let us know below.
Features of Kitkat :
12. Improved security
Despite its popularity, security is still a core problem for the Android platform. This is primarily down to the Google Play store being a infiltrated with apps containing malware malware, but isn’t the only cause.
Most recently, Bluebox Security discovered a “Master Key” flaw, which means that 99 per cent of devices vulnerable (900 million) can be hacked. A patch is being rolled out as we speak, it’s another major sign that Google needs to do more to ensure its devices are safer.
11. Performance profiles
We’ve already got the ability to toggle between silent and flight mode, but enhanced profiles which can be customised to alter the performance levels of the device will be invaluable as they can help to save battery life or boost CPU speeds for complex tasks .
OEMs such as Motorola and Samsung already offer users things such as Blocking Mode and Smart Actions, respectively. We would like to see Google step up and offer a variety of modes built into Android, especially for its Nexus range. These will allow the user to save battery overnight, turn up performance when carrying using the device for gaming/multimedia and settings for in between.
Click to expand...
Click to collapse
10. Beef up Google Now
Google Now was introduced in 2011 as part of Android Jelly Bean 4.1, but it's usefulness is largely restricted to the US.
In the UK, the software primarily functions as a reminder tool for events you may have – and is always on hand to show you how long it will take to get home from any given location. We expect Google to make some more partnership announcements, which will extend the usefulness of Now outside of the grand ol’ USA.
Click to expand...
Click to collapse
9. Ability to turn off OEM skins on any device
When Android 4.4 KitKat launches, it is expected to arrive on a brand-new handset carrying Google’s 'Nexus' branding.
Likely to be dubbed the Nexus 5, this smartphone will ship with the vanilla version of Android, and will be developer friendly. OEMs such as HTC, LG and Samsung will place their custom skins over the top of Android KitKat when it is released on their handsets to differentiate them.
It would be good if Google built-in a master switch into Android, giving users the choice to switch off these OEM skins without having to root devices.
The chances of this happening though are virtually zero. OEMs such as HTC and Samsung add features which will only work with their respective skins active, and they are not going to want to let users disable them. Google is unlikely to pull rank on its partners too – as it feels that one of the strengths of the operating system is its customisation
8. Child/Business-friendly modes as standard
Kids Corner was a useful feature that Microsoft introduced in the Windows Phone 8 OS. Microsoft effectively built a sandbox into the mobile OS, allowing users to lockdown sensitive information like emails, while allowing kids to access features such as games. It would be good to see Google incorporate a similar feature into Android.
BlackBerry built-in its Balance feature into Z10 smartphones. This allows IT admins to separate business and personal data – and means that employees cannot copy sensitive information from one side to the other. It also means when a user leaves an organisation, the business side of the handset can be wiped without affecting the personal information.
Samsung is already trying to make inroads into the enterprise by launching a Secured Edition of Android known as Knox. This aims to replicate the functionality of BlackBerry Balance, so it is possible to do so.
Click to expand...
Click to collapse
7. Find my Droid
You'd expect a simple feature like this to be included in a comprehensive system such as Android, but it has yet to materialise.
With the firm’s extensive mapping service, and GPS included into handset, it shouldn’t be too much of a stretch for Google to build this functionality into the heart of the OS.
6. Revamped messaging
This is the feature which has been talked about extensively, due to information leaking. It will be interesting to see to how Google goes about tackling messaging in a world where apps such as Whatsapp dominate.
Google's "Babel” service is expected to allow users to access messages across Android smartphones and tablets. The web giant is also tipped to launch clients for other popular platforms such as iOS.
Folks over at the Google Operating System blog found a javascript file on Gmail servers appearing to confirm the existence of Babel and some of the key features it will include:
Redesigned conversation-based UI
Access conversation lists from smartphones, tablet and PCs
Advanced group conversations
Ability to send pictures
Improved notifications across devices
Click to expand...
Click to collapse
5. Offline maps and better control over location settings
Nokia has been leading the way in this field by allowing users to download comprehensive guidance and then use it for free offline. Google already offers comprehensive guidance through its Maps and Navigation apps, but it does crunch through battery when in use.
Privacy hasn't been a strong point for Google, with the firm receiving numerous fines about collecting data from individuals. A way in which Google could try and rebuild its privacy image would be to let users choose whether they want to share their location.
iOS already allows users to turn off location services on individual apps if they choose to. This feature would be welcome on Android so you don’t have all your apps sending off data. Of course it would help to save battery life too.
4. Improved battery life and performance
There are whispers that Google will upgrade the framework of Android to the Linux 3.8 Kernel. What does this mean for regular users?
In short, such an upgrade should make Android less memory hungry. Devices should become more efficient as they gobble up less RAM for tasks and inturn this should result in improved battery life.
Google introduced its Project Butter initiate with Jelly Bean to help solve the latency issues Android was experiencing. This has gone a long way toward reducing the perceived “lag” associated with Android. Improvements to Butter are expected.
Click to expand...
Click to collapse
3. Enhanced multitasking
Android has been at the forefront of mobile computing when it comes to features such as multitasking. Users are able to run multiple apps at the same time and flick between them.
With the forthcoming Galaxy S4, Samsung will allow users to snap two apps onto the screen of the 5in device, so they can be used at the same time. It’ll be possible to watch videos when replying to emails, or surf the internet and make notes.
It would be great to see Google take the initiative and make a multitasking feature like this standard across all high-end handsets.
2. Complete Android backup
Although it is possible to sync key features such as contacts and apps with a Gmail account – a full blown native backup is lacking from Android handsets.
When you switch between Android handsets, photos, music and text messages are lost in the transition, as are any customisations you have made.
Apple already has a cloud backup service, which works well when you upgrade your iPhone– and we hope Google will introduce something similar to this with Android KitKat.
Click to expand...
Click to collapse
1: Its nothing to say .... it's really awesome in gaming performance and camera has a fully themed and enhanced Digital quality ..... as per for nexus 5 in screenshot
Moto G [ 4.4 ] Kitkat :
Moto g comes with android 4.4.2 ... which got a big hit in market
Cyanogen mod 11
Cyanogen mod 11 is the version of kitkat ...for all supported devices
Feel 4.4.2
Hit thanks if i gave some useful information
Hacking is the feel of Myself ... and yourself
Where is LINK CM 11??? Please give me please...
Sent from my GT-I8262 using XDA Free mobile app
[email protected] said:
Where is LINK CM 11??? Please give me please...
Sent from my GT-I8262 using XDA Free mobile app
Click to expand...
Click to collapse
Deleted
Grate review!
Really great thread didn't knew about many. cheers for you
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Monitordroid allows you to remotely access and manage multiple Android devices from a web browser anytime, anywhere. No rooting required.
We are proud to announce that Monitordroid is finally out of beta!
Our code is open source. You can find it here: https://github.com/tyler124
We appreciate all open source contributions. Thank you in advance. Please contact [email protected] about any open source questions.
Our website: https://www.monitordroid.com
Current Features
Monitordroid is versatile and can be used for a variety of purposes including
1. Remote Administration of your own devices.
2. Theft protection for your devices.
3. Parental Control software for monitoring children which you have legal custody of and are under age 18.
4. Employee tracking software for company owned devices.
How it works
Sign up for an account on our website
Download the Monitordroid app onto the device from the Play Store. You can find it by clicking here
Login to your account to start managing your devices. Please remember to send us your suggestions, comments, and questions.
Video
Screenshots
How we started:
We noticed a while back that there was a lack of quality software available that allowed users to remotely access and manage multiple Android devices.
There are great apps such as Mobizen and Airdroid available, but they are mostly designed only to support a single device and are always running in the background, creating an obvious icon in the device’s notification bar and running up battery and data use. Then there is software like mSpy and WebWatcher, which have expensive monthly subscriptions, are unstable, and don’t create a real time connection with the device. They don’t give the control that users want.
So we set out to create Monitordroid, a dedicated commercial-grade remote access and management tool for Android.
The software is also open source and capable of being used completely free of charge if you are able to set up a web server and have a little experience with Android programming.
Monitordroid is designed from the ground up to be fundamentally different than any other remote administration software for Android. It does not use sockets, SMS, or XMPP to send commands to devices, all of which have been proven unstable or slow.
The software was developed from the very beginning to be incredibly stable and crash-resistant, so that once you install it on a device you never have to worry about doing so again.
Monitordroid is designed in a way that it is only run on the mobile device when a user sends it commands through the web application. For this reason, network usage and battery consumption are nearly non-existent.
Free Open-Source Installation:
To use Monitordroid free of charge, you're going to have to have your own server with PHP 5.0+ and MySQL. If you want to run Monitordroid on your local machine, software like XAMPP will work fine. After that, you can download the source code and make a few small modifications to configure the mobile application to connect to your server. Read more detailed instructions on how to setup your own (free) server in the readme.md file at:
https://github.com/tyler124/Monitordroid-Web-Application
When your server is ready, you can follow the instructions in the readme.md file for setting up the mobile app at:
https://github.com/tyler124/Monitordroid
Monitordroid on the Play Store: https://play.google.com/store/apps/details?id=com.monitordroid.app&hl=en
Visit our website: https://www.monitordroid.com
thanks bro :fingers-crossed:
This is awesome! Will use this :good:
How do i get the app or install this?
Sent from my VS980 4G using XDA Premium 4 mobile app
not available for my "Nexus 7" (It is really a Kindle Fire with a build.prop MOD), can I download an apk from somewhere?
Any plans on screen casting?
Or it's not even possible
app is on play store
Monitordroid 1.1 APK can be found at:
http://www.monitordroid.com/apk/Monitordroid11.apk
or
http://bit.ly/1BEyivF
Allen Hu said:
Any plans on screen casting?
Or it's not even possible
Click to expand...
Click to collapse
Afraid any features like screenshots or screencasting would require having a rooted device, which I'm not actively developing towards.
If anyone wants to contribute root-only features to the source though... :good:
Is there a limit on the number of devices that you can register to one account?
EDIT: also, there is a fine line between being useful and being useful to the point of being considered malware. DenDroid and other RAT applications have gotten huge amounts of bad press recently becuase of the functionality that they posess and the possibility of being installed without users knowledge by being packaged in other applications.
Do you have any plans in place to stop your application getting a bad name for itself? Or to stop it from being used for these kinds of purposes?
Perhaps by enforcing a manual registration process on the phone itself.
(I just want to make clear I am not, in any way, accusing this application of any sort of nefarious tasks)
EDIT2: I found the answer to my first question in your FAQ.
How many devices can I control with a single Monitordroid account?
During beta testing, Monitordroid limits users to a total of 10 devices per account. In the future, new accounts will most likely be limited to 5 devices at first, with the option to purchase more. In that case, customers who purchase in beta will still retain their 10 device maximum.
Click to expand...
Click to collapse
re monitoroid
Love to play with this, can it be set up on my own web server, rather than local wamp, or it needs access to android SDK files, which I guess could be done server side, just got too many other little projects on now to start trying to learn all that, I'll lock in a beta trial from your server for now, and play around on wamp when ibget a chance, then think about running off my web server, more practical in the long run, but for 10 bucks could just let you guys do all the heavy lifting, but lose a bit of full control... Good luck with the project. Could be a winner longterm
not sure if I am missing anything here, but isn't Webkey a better option with more functions and completely free?
https://play.google.com/store/apps/details?id=com.webkey&hl=en
wernyuen said:
not sure if I am missing anything here, but isn't Webkey a better option with more functions and completely free?
https://play.google.com/store/apps/details?id=com.webkey&hl=en
Click to expand...
Click to collapse
Webkey user here. I was disappointed about not seeing remote screen view and control. But yes this requires root.
I respect not putting in root features but this is the only real feature i use of webkey.
d31b0y said:
Is there a limit on the number of devices that you can register to one account?
EDIT: also, there is a fine line between being useful and being useful to the point of being considered malware. DenDroid and other RAT applications have gotten huge amounts of bad press recently becuase of the functionality that they posess and the possibility of being installed without users knowledge by being packaged in other applications.
Do you have any plans in place to stop your application getting a bad name for itself? Or to stop it from being used for these kinds of purposes?
Perhaps by enforcing a manual registration process on the phone itself.
(I just want to make clear I am not, in any way, accusing this application of any sort of nefarious tasks)
EDIT2: I found the answer to my first question in your FAQ.
Click to expand...
Click to collapse
Yes, at first I was conflicted about calling it a Remote Administration Tool due to the malicious reputation of similar tools even though that's what it really is. However, Monitordroid does require physical access to the device unlike other tools designed to be malicious which can be binded to another application's APK and spread through an app store.
mephala124 said:
Afraid any features like screenshots or screencasting would require having a rooted device, which I'm not actively developing towards.
If anyone wants to contribute root-only features to the source though... :good:
Click to expand...
Click to collapse
we want root we want root
basic
mmm very basic application just for kids. NOT PRO.
No rooted features, no screen capture, stream audio, etc.
Just something any coder could code in 2 minutes.
Hope you improve it, else it is just for 4 years old kids that want to play with android
droopyar said:
mmm very basic application just for kids. NOT PRO.
No rooted features, no screen capture, stream audio, etc.
Just something any coder could code in 2 minutes.
Hope you improve it, else it is just for 4 years old kids that want to play with android
Click to expand...
Click to collapse
The Application is currently in a beta state with more standard features to be added soon. The application is also open-source with a good, stable foundation for server-device communication, so if someone wanted to contribute root-only features to the source I would happily be in support of that.
I may eventually develop root-only features myself, but for now i'm more focused on developing features that can be used on any device.
sounds good, downloading
mephala124 said:
http://www.montiordroid.com/
Click to expand...
Click to collapse
Hate to be a grammar nazi but please correct URL as it links to a different site. :highfive:
Server Source Code
Am I missing something here or the server source code isn't available ?
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Bitwarden - Free & open source password manager for all of your devices
Download .apk directly
Description
Bitwarden is the easiest and safest way to store all of your logins and passwords while conveniently keeping them synced between all of your devices.
Password theft is a serious problem. The websites and apps that you use are under attack every day. Security breaches occur and your passwords are stolen. When you reuse the same passwords across apps and websites hackers can easily access your email, bank, and other important accounts.
Security experts recommend that you use a different, randomly generated password for every account that you create. But how do you manage all those passwords? Bitwarden makes it easy for you to create, store, and access your passwords.
Bitwarden stores all of your logins in an encrypted vault that syncs across all of your devices. Since it's fully encrypted before it ever leaves your device, only you have access to your data. Not even the team at Bitwarden can read your data, even if we wanted to. Your data is sealed with AES-256 bit encryption, salted hashing, and PBKDF2 SHA-256.
Bitwarden is 100% open source software. The source code for Bitwarden is hosted on GitHub and everyone is free to review, audit, and contribute to the Bitwarden codebase.
Screenshots
Source Code
Check bitwarden out on GitHub.
Mobile app: https://github.com/bitwarden/mobile
All other components: https://github.com/bitwarden
More
Learn more about bitwarden on our product website https://bitwarden.com
Beta Testing
Try out the latest features! Join the bitwarden beta testing program on Google Play here: https://play.google.com/apps/testing/com.x8bit.bitwarden
Thanks for opening a thread on XDA.
I'm waiting for a few features before leaving Lastpass.
Keep it up! You have already done an awesome job!
Primokorn said:
Thanks for opening a thread on XDA.
I'm waiting for a few features before leaving Lastpass.
Keep it up! You have already done an awesome job!
Click to expand...
Click to collapse
Thanks! Hoping to spark some interest/discussion/feedback here.
How close are you to the accessibility service and allowing automatic filling in of apps and internet like LastPass does? This is basically what I am waiting for and that is it.
LudoGris said:
How close are you to the accessibility service and allowing automatic filling in of apps and internet like LastPass does? This is basically what I am waiting for and that is it.
Click to expand...
Click to collapse
Hoping to have it available within the next couple of months. You can track progress of that feature here: https://github.com/bitwarden/mobile/issues/1
I've just read your email for the Kickstarter compaign and I'm willing to pay for the Early Backer Lifetime Premium Membership.
As you explain on HN, bitwarden is sponsored by the Microsoft BizSpark program. So could you give more explanations? For how long is it sponsored by Microsoft? What could happen if you don't reach $49,000?
My main worries are Auto-fill for Android and Independant security audits. Do you plan annual audits of the whole source code?
I dont really understand this point:
Operations. Growing bitwarden requires investment to accelerate product feature development and power our secure product servers.
Click to expand...
Click to collapse
Servers are managed by Microsoft Azure? Do you want to leave Microsoft and increase your server access/storage?
Did you ever consider using other services than the one provided by Microsoft ('a GAFAM')?
French translation done
Can you also explain, why you (bitwarden) over established brands like LastPass and Dashlane?
LudoGris said:
Can you also explain, why you (bitwarden) over established brands like LastPass and Dashlane?
Click to expand...
Click to collapse
I can at least say that bitwarden is fully open source, the main reason why I will probably stop using LastPass.
Kyle (kspearrin) takes into account users feedbacks and seems to be opened to suggestions. AFAIK it's as secure as LastPass.
Primokorn said:
I've just read your email for the Kickstarter compaign and I'm willing to pay for the Early Backer Lifetime Premium Membership.
As you explain on HN, bitwarden is sponsored by the Microsoft BizSpark program. So could you give more explanations? For how long is it sponsored by Microsoft? What could happen if you don't reach $49,000?
My main worries are Auto-fill for Android and Independant security audits. Do you plan annual audits of the whole source code?
I dont really understand this point:
Servers are managed by Microsoft Azure? Do you want to leave Microsoft and increase your server access/storage?
Did you ever consider using other services than the one provided by Microsoft ('a GAFAM')?
French translation done
Click to expand...
Click to collapse
Our current sponsorship lasts for 2.5 more years, however, this sponsorship is not infinite. As bitwarden grows larger we will outgrow the sponsorship and need additional investment. We are not anywhere near our ceiling on this yet though.
If we do not reach our goal, I will still continue working on the project and the features outlined. That is not in question. Things just might move at a much slower pace than I would like since I have other obligations that prevent me from doing this full-time.
Leaving Azure is not in question at the moment. It works well and supports our needs.
Thanks again for your french translations!
@Primokorn Could you please email from the contact form on the website, https://bitwarden.com/contact/? I'm trying to collect all of the translation contributors contact information so that I can keep you up to date via email when translations change. Thanks.
kspearrin said:
@Primokorn Could you please email from the contact form on the website, https://bitwarden.com/contact/? I'm trying to collect all of the translation contributors contact information so that I can keep you up to date via email when translations change. Thanks.
Click to expand...
Click to collapse
No problem. Done.
I'll do the missing translations in the coming days.
Update for 1.2.1 posted.
https://github.com/bitwarden/mobile/releases/download/v1.2.1/com.x8bit.bitwarden.apk
- Performance improvements
- Bug & crash fixes
- Added Chinese language localization
Updated for version 1.3.0 with autofill! @LudoGris
https://github.com/bitwarden/mobile/releases/tag/v1.3.0
- New auto-fill accessibility service to auto-fill your logins into other apps and websites. Check the tools screen for more info on setting it up!
- Finnish language added
- Support for "equivalent domains" when auto-filling (configurable from web vault)
- Better syncing
- Bug & crash fixes
Why auto fill is not working with uc browser ?
jerryn70 said:
Why auto fill is not working with uc browser ?
Click to expand...
Click to collapse
Some browsers do not work properly with accessibility services so we cannot support them at this time. I haven't tested UC browser through. Can you link me to it and I'll check it out.
kspearrin said:
Some browsers do not work properly with accessibility services so we cannot support them at this time. I haven't tested UC browser through. Can you link me to it and I'll check it out.
Click to expand...
Click to collapse
https://play.google.com/store/apps/details?id=com.UCMobile.intl
Why we need to add seperate login details for app and it's site ?
If I add xda app login details to bitwarden, then when I visit xda site, again I need to add the login details to bitwarden.
In lastpass we need to enter only one. If we add app login details, when we visit it's website it will auto detect the details.
jerryn70 said:
Why we need to add seperate login details for app and it's site ?
If I add xda app login details to bitwarden, then when I visit xda site, again I need to add the login details to bitwarden.
In lastpass we need to enter only one. If we add app login details, when we visit it's website it will auto detect the details.
Click to expand...
Click to collapse
Yep that is a mess.
---------- Post added at 08:54 PM ---------- Previous post was at 08:45 PM ----------
@kspearrin you have a wonderful app here. Switched from keepassx. Using it via chrome extension and android app. Issues that i found: double pass for android and web and accessibility services does not work on Chrome Dev on 7.1.1
Keep up the good work and thanks!
@jerryn70 @icrunchbanger we're working on some improvements to that flow.
@jerryn70 @icrunchbanger I've added some improvements to autofill that is now in beta to test:
1. Added two groups of logins in the autofill listing: matching logins and possible matching logins.
- Matching logins are the results from the way the current version works (complete matches).
- Possible matching logins are ones were the app tries to make a guess based on the reverse domain of the package name on an app. For example, `androidapp://com.google.plus` will match `https://google.com`. A warning alert is shown whenever you select a possible matching login for autofill since it is possible to exploit this method.
2. Added ability to search your full vault to select anything for the autofill.
Get the beta here: https://play.google.com/apps/testing/com.x8bit.bitwarden
Let me know any feedback and I'll plan on publishing this soon.
Hi everyone,
I have created my own Parental Control application since I had difficulties to find a free, simple and secure one.
I'm actually searching for testers or good ideas.
It allows to:
avoid installing new application by blocking the Play Store
block the installed applications (completely or by adding a time limit)
limit the calls duration
ensure the Youtube parental filter is enabled (and stays enabled)
track your child applications or network activities
be warned when your child leave a defined area (PAID FEATURE)
block undesired content (adult/illegal websites...) or a specific website by filtering the device's network requests (PAID FEATURE)
Beware of one thing: Kiddie does not provide any remote control. You will have to take your child's device to do restriction modifications.
Play Store link:
https://play.google.com/store/apps/details?id=net.frju.heimdall
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
fr_ju said:
Hi everyone,
I have created my own Parental Control application since I had difficulties to find a free, simple and secure one.
I'm actually searching for testers or good ideas (like better name or icon).
It allows to:
avoid installing new application
restrict the installed applications (block them or add a time limit)
limit the call duration
ensure the Google Play/Youtube/... parental filters are enabled (and stay enabled)
track your child applications or network activities
block undesired content (adult/illegal websites...) by filtering the phone's network requests (this is the only paid feature)
Beware of one thing: Heimdall does not provide any remote control. You will have to take your child's device to do restriction modifications.
Play Store link:
https://play.google.com/store/apps/details?id=net.frju.heimdall
Click to expand...
Click to collapse
Looks good! Can you add functionality for maximum daily use and non-use time (e.g. bedtime or school time)? Thnx!
grimloktt said:
Looks good! Can you add functionality for maximum daily use and non-use time (e.g. bedtime or school time)? Thnx!
Click to expand...
Click to collapse
Agree.
Great and useful application.
The maximum daily usage feature is really important to make it real hit against those apps that wants money.
I'm a beginner in Android programming, but i would also like to contribute to this project.
Hi everyone,
For your information Heimdall has evolved since the first post here. Several features has been added, including the one you were asking here: a global phone limit. However, please note I've added that one in the paid version only.
Why can't I install it on my Android 8.1 Huawei P20?
Off-topic: For a moment I was confused on why a tool for flashing ROMs on Samsung Galaxy S was in focus again !
Is remote control coming? Like viewing what apps they have downloaded or seeing YouTube history?
Sent from my Sony Xperia XZ1 using XDA Labs
Cool app. In my opinion:
1. Blocking the entire settings app is too overreaching, only sensitive settings activities should be blocked (VPN, Accessibility).
2. Remote control would be nice (eg. kid is at a friend's for the afternoon and you want to unlock stuff without driving across town).
3. Maybe a way to pick individual activities inside applications (eg. YouTube settings panel).
Before selecting a name for an app, you should search XDA for that name. In case of heimdall you will find the Linux version of Odin. The well known Samsung flashing tool.
Great news. Merci !
Can't you do a free webblock version with stevenblack hosts file (i guess root will be necessary) or parental dns like norton or opendns ? Thanks.
@fr_ju: Fred, if interested to get the app translated you may want to consider to announce it here.
kurtn said:
Before selecting a name for an app, you should search XDA for that name. In case of heimdall you will find the Linux version of Odin. The well known Samsung flashing tool.
Click to expand...
Click to collapse
You're certainly correct and it would make it easier to distinguish. However, I doubt that the name of a Norse god bears a copyright or trademark, and Heimdall(r) seems to be a good patron of an application with the desired intention. But as Fred also asks for ideas about the app's name, how about "Heimdall's Horn" i.e. Gjallarhorn.
Well. I'd love to use this app, but I can't install it from the play store.
Apk available?
Hi all, thanks for your comments. I'll try to answer all your questions:
- I actually knew about the flashing tool before selecting Heimdall as name, but I believe most people actually doesn't know about the flashing tool (except maybe on xda). And I like the sound and meaning of it.
- concerning impossibility to install Heimdall on Huawei: I actually had to block all Huawei, Honor and Xiaomi devices due to incompatibilities. These manufacturers heavily modify Android and Heimdall protections are randomly disabled on theses devices.
- concerning the settings app which is always blocked: at the beginning I were only blocking some settings activities and not the whole app, but I quickly discover that it is actually complicated to cover all cases due to all different or modified version of Android. So I chose the easy way, but this is not the first time I heard complaint about that so I will think about it and try to find a better way.
- concerning the remote control: for now I want to avoid sending data to a server (for several reasons, including the privacy protection). So having a remote control in that condition is not that simple. I may extend the existing remote control via SMS in the future to support more use cases, but for the user it is not as simple as other solutions.
fr_ju said:
- concerning the settings app which is always blocked: at the beginning I were only blocking some settings activities and not the whole app, but I quickly discover that it is actually complicated to cover all cases due to all different or modified version of Android. So I chose the easy way, but this is not the first time I heard complaint about that so I will think about it and try to find a better way.
Click to expand...
Click to collapse
One way that it may be done is to allow the used to optionally block activities instead of whole apps. You should be able to get activity lists from blocked apps. You can ship the App with the whole settings blocked by default and allow users to fine tune the blocking if needed.
fr_ju said:
- concerning the remote control: for now I want to avoid sending data to a server (for several reasons, including the privacy protection). So having a remote control in that condition is not that simple. I may extend the existing remote control via SMS in the future to support more use cases, but for the user it is not as simple as other solutions.
Click to expand...
Click to collapse
Your concern for privacy is commendable. SMS control is nice but won't work for devices without cellular connection, such as tablets or phones running without a network plan and/or SIM cards (such devices are popular with kids in my corner of the world). If you decide to go with some form of cloud messaging, please use GCM as it's the de facto standard. If you're targeting non-Google devices, I hear MQTT is good, but you'll have to have your own infrastructure and have users exclude Heimdall from battery optimization.
Steelskinz said:
Great news. Merci !
Can't you do a free webblock version with stevenblack hosts file (i guess root will be necessary) or parental dns like norton or opendns ? Thanks.
Click to expand...
Click to collapse
I can tell you how to recover the mail data. I recently lost very important letters. And I tried to restore them. But did does not work out. Therefore, I tried to use one of these utilities . To my luck, everything turned out. Perhaps this will help you too.
Kids Dashboard free app and free cloud (Basically you are making dashboard kiosk like small mdm)
PLAY STORE LINK : https://play.google.com/store/apps/details?id=com.tabnova.aidashboard
Cloud Login: https://cloud.kidsdashboard.com
Main site : http://www.kidsdashboard.com/
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Sh-ort is a how I reimagined a URL Shortener app using Material Design to build a branded experience, through UI and Motion.
There are several apps that take care of shortening urls, and they are great at what they do but they all have more or less the same design and are a little boring.
Also when you have many urls it is difficult to manage the statistics well and to have everything at hand, maybe a general overview of how your links are performing would be fantastic - I thought - and also give the user the possibility to render the entries in the list more recognizable thanks to the preview of the article, or of the page whose URL you have shortened.
Then I thought about who could use the app, to a tempt who perhaps manages several websites for work, and who might want to see how the links belonging to the same site perform.
I have created a small app that attempts to improve the experience with URL shortener, through its structure (overview, all links, best links), the ability to filter links based on the site they belong to, the date, or whether they are added to favorites or not.
The details department is still in its early stages but you can have the complete statistics on clicks already by default, without the need for a subscription as happens in major similar apps.
Of course there is still a lot to improve, so I trust in your feedback to find bugs and to add features that I missed in this first release.
There is a complete lack of translations in all languages and dark mode, which will be implemented once the app has reached a modest number of functions and use cases, making it an attractive app for the average and pro user.
Find more information on my app design and branding process in the Medium article linked below, as well as the link to download the app.
I look forward to hearing from you and your feedback, thanks for your attention.
About the design: https://mirko-ddd.medium.com/how-material-design-helps-you-brand-your-app-b7cb191524f7
App download: https://sh-ort.app/gkd9g
can you use it on the computer?
I don't care about tracking, do I still have to use a Google account?
prplt said:
can you use it on the computer?
Click to expand...
Click to collapse
For the moment I am focusing on the android app, but in future I may extend to web and other platforms
wfred said:
I don't care about tracking, do I still have to use a Google account?
Click to expand...
Click to collapse
Hello, the login part has nothing to do with tracking, it is simply used to let the user create collections of short urls on the server, and sync it across devices.
Mirko ddd said:
View attachment 5216725
Sh-ort is a how I reimagined a URL Shortener app using Material Design to build a branded experience, through UI and Motion.
There are several apps that take care of shortening urls, and they are great at what they do but they all have more or less the same design and are a little boring.
Also when you have many urls it is difficult to manage the statistics well and to have everything at hand, maybe a general overview of how your links are performing would be fantastic - I thought - and also give the user the possibility to render the entries in the list more recognizable thanks to the preview of the article, or of the page whose URL you have shortened.
Then I thought about who could use the app, to a tempt who perhaps manages several websites for work, and who might want to see how the links belonging to the same site perform.
I have created a small app that attempts to improve the experience with URL shortener, through its structure (overview, all links, best links), the ability to filter links based on the site they belong to, the date, or whether they are added to favorites or not.
The details department is still in its early stages but you can have the complete statistics on clicks already by default, without the need for a subscription as happens in major similar apps.
Of course there is still a lot to improve, so I trust in your feedback to find bugs and to add features that I missed in this first release.
There is a complete lack of translations in all languages and dark mode, which will be implemented once the app has reached a modest number of functions and use cases, making it an attractive app for the average and pro user.
Find more information on my app design and branding process in the Medium article linked below, as well as the link to download the app.
I look forward to hearing from you and your feedback, thanks for your attention.
About the design: https://mirko-ddd.medium.com/how-material-design-helps-you-brand-your-app-b7cb191524f7
App download: https://sh-ort.app/gkd9g
Click to expand...
Click to collapse
I've tried this app and it is really amazing compared to Bitly android app.
Thanks, Mirko!
Mirko ddd said:
Hello, the login part has nothing to do with tracking, it is simply used to let the user create collections of short urls on the server, and sync it across devices.
Click to expand...
Click to collapse
Sorry, I meant syncing and saving, not Google tracking me.
Just installed/uninstalled, the app won't even start without a Google login.
I'm not interested in saving, collecting, or syncing shortened URL's, just sending “one and done” links from my phone. Can you tweak this to eliminate the login?
wfred said:
Sorry, I meant syncing and saving, not Google tracking me.
Just installed/uninstalled, the app won't even start without a Google login.
I'm not interested in saving, collecting, or syncing shortened URL's, just sending “one and done” links from my phone. Can you tweak this to eliminate the login?
Click to expand...
Click to collapse
The app is designed to assign an owner to every short url so the owner can check the short url performance. If you are not interested in stats means that this is not an app that fits your needs.
fulvius31 said:
I've tried this app and it is really amazing compared to Bitly android app.
Thanks, Mirko!
Click to expand...
Click to collapse
Thank you very much Fulvius
Mirko ddd said:
The app is designed to assign an owner to every short url so the owner can check the short url performance. If you are not interested in stats means that this is not an app that fits your needs.
Click to expand...
Click to collapse
True, no problem. I'm not your target user.
For some reason that app force closes every time I try to load it. Tried clearing cache/data & even uninstall/reinstall. Android 10 stock, w/ magisk
Chaprnks said:
For some reason that app force closes every time I try to load it. Tried clearing cache/data & even uninstall/reinstall. Android 10 stock, w/ magisk
Click to expand...
Click to collapse
Hello, thanks for reaching out but I cannot guess what is the problem just knowing your android version. For sure I can say that have not passed at least 3 hours yet since you got crashes because the crash console is flat.
Write your device model and as soon I get the report I can see what s wrong and eventually I will fix it.
Mirko ddd said:
Hello, thanks for reaching out but I cannot guess what is the problem just knowing your android version. For sure I can say that have not passed at least 3 hours yet since you got crashes because the crash console is flat.
Write your device model and as soon I get the report I can see what s wrong and eventually I will fix it.
Click to expand...
Click to collapse
Would sending you a logcat of the crash make it easier?
Chaprnks said:
Would sending you a logcat of the crash make it easier?
Click to expand...
Click to collapse
The app code is obfuscated, I don t know if you would actually get something useful from it. But giving a try doesn t cost anything, right?
you can find the email where to send the log in the Google Play page of the app
Edit: by the way, the package name is it.mirko.sh_ort if you want to clean your log