bastion

bastion is a local-first, zero-knowledge open-source password manager for Android. Evolved independently from Monica, it maintains core security while implementing extensive engineering optimizations for performance, memory, autofill, and Android 17 adaptation. All credentials are encrypted by default using AES-256-GCM and stored locally, with keys guarded by the system hardware Keystore (TEE). The application requires no network permissions, ensuring data remains completely offline. It supports fingerprint or facial biometric unlocking and actively clears memory key caches upon locking to implement a zero-trust security model. bastion is compatible with Bitwarden synchronization and KeePass (.kdbx) read/write operations. It can connect to self-hosted Bitwarden servers or perform cross-device encrypted synchronization via WebDAV, avoiding lock-in to a single ecosystem. A built-in TOTP authenticator centrally manages dynamic verification codes, and it supports Android autofill services across apps and browsers. On Android 14+, it provides a Passkey credential provider, keeping pace with modern passwordless authentication trends. The project is fully open-source under GPLv3, with transparent CI build and release processes, offering Stable and Preview APK channels. Data import supports KeePass and Bitwarden JSON for easy migration from other managers. Multiple themes (Nature, Material You, Dark, Pure Black, RG Eye Protection) cater to different user preferences. Compared to the upstream Monica, bastion fixes the autofill issue where only passwords were filled without usernames, reduces Bitwarden warm-up time from 1.5 seconds to instantaneous, unifies coroutine management to prevent leaks, and upgrades targetSdk to 37 for full adaptation to Android 17 behavior changes.