This is a demo password manager, once you login with your Firefox Account, it reads in your logins+passwords, and behaves like a basic standalone password manager,
It uses the Firefox Android Sync Library from here:
https://github.com/mozilla-mobile/FirefoxData-android
All of the code I added is in this directory:
./example/src/main/java/org/mozilla/accountsexample
The obvious flaw here is that instead of building cleanly on top of that library, I just mashed code on top the AccountsExample code that was already present.
There are a few reasons for this not being a 'clean' repo. First, is that I began experimenting with a preliminary version of the FirefoxData library, modifying the sample code. The main repo changed significantly from the version I was experimenting with. Second, the intent was that if it was actually being developed further, it would be refactored into a project that had a jcenter dep with the library.
There is no plan to use this beyond an interesting proof-of-concept.
This project has the following purposes:
- examine standalone Firefox Accounts login
- pull in logins table from Firefox Sync to a standalone app
- experiement with Android KeyStore for device secure local storage for storing a symmetric encryption key used for encrypting/decrypting local data
- as a minor detail, experiment with app-specific passcodes, and basic copy/paste functionality for password management
Building:
Follow the build instructions from https://github.com/mozilla-mobile/FirefoxData-android
Essentially, open the project in Android Studio, and run the default gradle task which is to build the AccountsExample project. I used an API level 25 simulator for most of this work, so that is the only guaranteed version.
Pattern lock view:
This uses https://github.com/aritraroy/PatternLockView, to experiment with using an in-app pattern lock without using Android's Confirm Credential API (that API only provides a seamless in-app flow on newer Android versions). Requiring a pattern lock or a 4-6 digit pin code to access the app seems quite common for password manager apps.
On app start you will be required to create a pattern to lock the app, the pattern is stored using the KeyStore.
There are a few pattern lock components on github, this one appears maintained and is straightforward to integrate into an app.