Is SFTP-SAF safe?

SFTP-SAF is a Storage Access Framework (SAF) documents provider for accessing data via SFTP. It allows you to directly view or edit data on an sftp server using Android's file manager, or any SAF capable application's file picker. No root is required It allows other apps to open and edit documents on the sftp server Read help online: https://github.com/AlainKnaff/Android-SFTP-Documents-Provider S…

Developer: Alain Knaff
Category: Cloud Storage & File Sync
Earliest archived version: 09 Sept 2026
License: GPL-3.0-or-later (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

06 Oct 2026

0.2.28

Freely settable display name of server account - reorganized account settings form to make room for new settings

Full notes →

22 Sept 2026

0.2.27

Support for SSH user certificates Current Limitations, may be adressed if there is demand: - a single certificate for all servers - not validated on import, there's no straightforward way to do so, see - no server certificate

Full notes →

09 Sept 2026

0.2.26

Use authority name derived from namespace / applicationId (application package) in order to make it more obvious to other applications which application supplies that authority. Old authority still supported additionally in case clients have uri permissions derived from old - Avoid network error if…

Full notes →

03 / Package identity

Technical fingerprint

Application IDlu.knaff.alain.saf_sftp

Latest APK SHA-2562527f9c1f818d83efed0b87b55c0c8a96d57234018e3d2139f993d468e9603e5

Signing certificate9E:29:C6:F8:A7:AD:20:38:8B:18:10:E8:38:1B:38:FB:EB:9E:A5:98:F7:91:1F:C7:3A:EA:DB:7C:3C:DA:E6:E6

MIN ANDROID26TARGET36ARCHITECTURE

04 / History

Archive history

3 versions in WIKI archive: earliest 0.2.26 (09 Sept 2026), latest 0.2.28 (06 Oct 2026).

No change in android.permission.* between 0.2.27 and 0.2.28.

05 / Version archive

Documented releases

3 TOTAL

VersionReleasedAndroidArchitecture

0.2.2806 Oct 202626+→0.2.2722 Sept 202626+→0.2.2609 Sept 202626+→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions2 declared · 0 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessNo sensitive permissions

Declared permissions

android.permission.INTERNET android.permission.POST_NOTIFICATIONS

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗