Is sub rosa by naiveHA safe?

Uncomplicatedly simple: if you manage your long, complicated and secure passwords in a password manager app (like KeePassDroid) on your Android device, you can now "type" them easily on any other device, be it a phone, tablet, or PC running Windows, Linux, or macOS. sub rosa allows you to program the static password of your YubiKey which then can be used to "type" the password with the touch of a…

Developer: naive-HA
Category: Security
Earliest archived version: 02 Aug 2026
License: Apache-2.0 (per IzzyOnDroid metadata)

02 / Package identity

Technical fingerprint

Application IDacab.naiveha.subrosa

Latest APK SHA-2569f2424b809e7d3255d7b7135cbe705c3c35d5245bdf3ed904f0f0193b71415d1

Signing certificate51:2C:CE:F5:1A:B8:BA:40:5C:22:F1:93:EA:12:05:62:9F:78:88:BE:8B:E0:69:B6:7B:EA:76:8B:C0:E5:36:AC

MIN ANDROID31TARGET37ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

03 / History

Archive history

2 versions in WIKI archive: earliest 2.3.1 (02 Aug 2026), latest 2.3.3 (03 Oct 2026).

No change in android.permission.* between 2.3.1 and 2.3.3.

04 / Version archive

Documented releases

2 TOTAL

VersionReleasedAndroidArchitecture

2.3.303 Oct 202631+arm64-v8a, armeabi-v7a, x86, x86_64→2.3.102 Aug 202631+arm64-v8a, armeabi-v7a, x86, x86_64→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceBinary repo · izzyondroid

Permissions3 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

acab.naiveha.subrosa.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION android.permission.NFC android.permission.VIBRATE

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗