Is sub rosa by naiveHA safe?

Uncomplicatedly simple: if you manage your long, complicated and secure passwords in a password manager app (like KeePassDroid) on your Android device, you can now "type" them easily on any other device, be it a phone, tablet, or PC running Windows, Linux, or macOS. sub rosa allows you to program the static password of your YubiKey which then can be used to "type" the password with the touch of a…

Developer: naive-HA
Category: Security
First release: 02 Aug 2026
License: Not documented

02 / Package identity

Technical fingerprint

Application IDacab.naiveha.subrosa

Latest APK SHA-2561e380bbf92616d495c45f7b4246ea421ab4b28c7ec84f9c843caf5261f6a5a89

Signing certificate51:2C:CE:F5:1A:B8:BA:40:5C:22:F1:93:EA:12:05:62:9F:78:88:BE:8B:E0:69:B6:7B:EA:76:8B:C0:E5:36:AC

MIN ANDROID31TARGET37ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

03 / History

Project timeline

02 Aug 2026

Package observed in source index

Metadata and versions observed from the izzyondroid repository index.

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

2.3.102 Aug 202631+arm64-v8a, armeabi-v7a, x86, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceBinary repo · izzyondroid

Permissions3 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

acab.naiveha.subrosa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION android.permission.NFC android.permission.VIBRATE

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗