Is Nextcloud Passwords safe?

This app connects to a Nextcloud server with Passwords App installed, and allows viewing and editing its content on a user-friendly UI. It also acts as an AutoFill service, making logging in on Android devices easier. Features: - Display user passwords and folders on a Material Design UI - Edit and create passwords, including custom fields - Edit and create folders - Show site icons, with cache t…

Developer: Hèctor Godoy
Category: Password & 2FA
Earliest archived version: 30 Dec 2025
License: GPL-3.0-or-later (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

30 Dec 2025

1.0.12

Fix crash when starting app in some cases - Add option to sort content by name or date - Dependency updates and internal improvements

Full notes →

03 / Package identity

Technical fingerprint

Application IDcom.hegocre.nextcloudpasswords

Latest APK SHA-256b8ee43950d3fd8473a78e85494af0800f9f0ba50be49a1d55aff8362ab2d4b9c

Signing certificate4A:87:02:C9:92:8C:D8:C6:88:85:6D:7D:4F:36:1B:9F:56:45:EC:32:EA:A4:26:49:7B:08:B5:AD:37:EF:F0:1D

MIN ANDROID24TARGET36ARCHITECTUREarm64-v8a · armeabi · armeabi-v7a · mips · mips64 · x86 · x86_64

04 / History

Archive history

2 versions in WIKI archive: earliest 1.0.12 (30 Dec 2025), latest 1.2.1 (16 Sept 2026).

Permissions changed between 1.0.12 and 1.2.1: added android.permission.ACCESS_LOCAL_NETWORK, android.permission.CAMERA.

05 / Version archive

Documented releases

2 TOTAL

VersionReleasedAndroidArchitecture

1.2.116 Sept 202624+arm64-v8a, armeabi, armeabi-v7a, mips, mips64, x86, x86_64→1.0.1230 Dec 202524+arm64-v8a, armeabi, armeabi-v7a, mips, mips64, x86, x86_64→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions11 declared · 2 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessCAMERAQUERY_ALL_PACKAGES

Declared permissions

android.permission.ACCESS_LOCAL_NETWORK android.permission.ACCESS_NETWORK_STATE android.permission.CAMERA android.permission.FOREGROUND_SERVICE android.permission.INTERNET android.permission.QUERY_ALL_PACKAGES android.permission.RECEIVE_BOOT_COMPLETED android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT android.permission.WAKE_LOCK com.hegocre.nextcloudpasswords.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗