Is BluePass safe?

Description BluePass extracts two factor authentication codes (2FA) from SMS and sends them to a paired device via Bluetooth RFCOMM. A Qt based companion app bluepass-server will receive the 2FA codes and provide them via the system clipboard. Use Case The company I work for is relying on third party services that require to authenticate using 2FA. The second factor is an SMS to your mobile phone…

Developer: Manuel Huber
Category: Connectivity
Earliest archived version: 02 Dec 2021
License: MIT (per F-Droid metadata)

02 / Release notes

Release notes from F-Droid

02 Dec 2021

0.3.0

Add a button to send the last code again to the companion app - Add a test button to allow to trigger sending a code to the companion app - Fix the format of the summary

Full notes →

03 / Package identity

Technical fingerprint

Application IDorg.booncode.bluepass4

Latest APK SHA-256ed8e50fe4873f1bed1ccb5bd7368b4daadc4f455f6e2e61c3e962d6c3b37639e

Signing certificate34:26:60:F0:21:F2:52:37:E8:56:87:51:FA:92:34:DD:A5:2E:54:25:4D:7F:76:C1:F2:BD:16:46:A9:70:AF:77

MIN ANDROID29TARGET29ARCHITECTURE

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

0.3.002 Dec 202129+→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions9 declared · 3 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessACCESS_COARSE_LOCATIONACCESS_FINE_LOCATIONRECEIVE_SMS

Declared permissions

android.permission.ACCESS_COARSE_LOCATION android.permission.ACCESS_FINE_LOCATION android.permission.BLUETOOTH android.permission.BLUETOOTH_ADMIN android.permission.BLUETOOTH_CONNECT android.permission.BLUETOOTH_SCAN android.permission.FOREGROUND_SERVICE android.permission.RECEIVE_SMS android.permission.WAKE_LOCK

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗