WIKIfor AndroidBETA
Directory/Security/PasschainSOURCE-BACKED RECORD
Passchain app icon
maintained

Passchain

s1m.hwfido2provider

Use security key with Bluetooth, NFC, USB or your phone secure element

Latest documented release1.1.125 Oct 2026 · 4.0 MB→
⬇ Download APK1.1.1 · 4.0 MBPublisher site ↗

01 / Overview

Is Passchain safe?

Passchain is a credential provider that allows you to use your USB/NFC security key or your phone secure element for passkeys/fido2/u2f authentication. Bluetooth keys aren't supported yet. This app doesn't need the Play Services. Once installed, go to your system settings > Passwords, passkeys and accounts, then enable Passchain.

Developer
s1m
Category
Security
Earliest archived version
27 Aug 2026
License
Apache-2.0 (per IzzyOnDroid metadata)

02 / Release notes

Release notes from IzzyOnDroid

1.1.1

Update microg lib: - Fix some QR-code logins - Fix authentication with a hardware key after screen-lock registration - Correctly require biometric for screen-lock registration - Fix login/registration on platforms supporting unknown key alg - Fix registration on Chromium-based browser, to mitigate…

Full notes →
1.1.1-rc1

Update microg lib: - Fix some QR-code logins - Fix authentication with a hardware key after screen-lock registration - Add, update CS, RU translations

Full notes →
1.1.0

Fix security issue (more on this later) - Add list and management of on-device credentials - Add dialog to select credential from USB/NFC key - Bump dependencies, and target SDK 37 - Add/Update AR, CS, DE, ZH-rCN translations - Some other bugfixes

Full notes →

03 / Package identity

Technical fingerprint

Application IDs1m.hwfido2provider
Latest APK SHA-2562daf18fbf929d0829b5d0e2c3431d2a53ecdae5a3e8e240ad87351f2f463fa0c
Signing certificate94:BD:36:BA:46:48:D3:86:97:CD:FC:F3:38:5B:6C:00:88:FF:3D:55:1C:E9:FC:16:05:0E:E0:80:B9:55:3E:C5
MIN ANDROID34TARGET37ARCHITECTUREarm64-v8a · armeabi-v7a · x86 · x86_64

04 / History

Archive history

3 versions in WIKI archive: earliest 1.1.0 (27 Aug 2026), latest 1.1.1 (25 Oct 2026).

No change in android.permission.* between 1.1.1-rc1 and 1.1.1.

05 / Version archive

Documented releases

3 TOTAL
VersionReleasedAndroidArchitecture
1.1.134+arm64-v8a, armeabi-v7a, x86, x86_64→1.1.1-rc134+arm64-v8a, armeabi-v7a, x86, x86_64→1.1.034+arm64-v8a, armeabi-v7a, x86, x86_64→

06 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source
IntegritySHA-256 verified vs source
SourceBinary repo · izzyondroid
Permissions17 declared · 3 sensitive
Signaturepresent
Anti-featuresNo known anti-features
Sensitive accessACCESS_COARSE_LOCATIONACCESS_FINE_LOCATIONQUERY_ALL_PACKAGES

Declared permissions

android.permission.ACCESS_COARSE_LOCATIONandroid.permission.ACCESS_FINE_LOCATIONandroid.permission.BLUETOOTHandroid.permission.BLUETOOTH_ADMINandroid.permission.BLUETOOTH_ADVERTISEandroid.permission.BLUETOOTH_CONNECTandroid.permission.BLUETOOTH_SCANandroid.permission.INTERACT_ACROSS_PROFILESandroid.permission.INTERACT_ACROSS_USERSandroid.permission.INTERNETandroid.permission.MANAGE_USBandroid.permission.NFCandroid.permission.QUERY_ALL_PACKAGESandroid.permission.START_ACTIVITIES_FROM_BACKGROUNDandroid.permission.USE_BIOMETRICandroid.permission.USE_FINGERPRINTs1m.hwfido2provider.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Tracker status: Not assessed by WIKI for Android.

07 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗