Documentation
On this page
Settings
Open Settings from the three dots in the list’s search bar, or from the welcome screen. Settings are grouped in six sections.
General
| Setting | What it does | Default |
|---|---|---|
| App theme | Light, dark, or following the system. | System default |
| Password file organization | How autofill names the files it saves, for example work/example.org.gpg or work/example.org/alice@example.org.gpg. |
work/example.org/alice@example.org.gpg |
| Password sort order | Folders first, or recently used first. | Folders first |
| Disable pull to sync action | Stops the pull down gesture on the list from starting a sync. | Off |
| Recursive filtering | Search also looks inside the folders below the current one. | On |
| Open search on start | Opens the search bar when the app starts. | Off |
| Show all files and folders | Lists files that are not passwords as well. | Off |
| Enable biometric authentication | Asks for your fingerprint when the app starts. See Security for what this does and does not protect. | Off |
Autofill
| Setting | What it does | Default |
|---|---|---|
| Enable Autofill | Makes HardenedPass the autofill service. See Autofill. | Off |
| Default username | Used when autofill cannot find a username in the entry or its path. | Empty |
| Custom domains | Domains whose subdomains autofill treats as separate sites. | Empty |
Passwords
| Setting | What it does | Default |
|---|---|---|
| Password generator type | The generator that opens first: Classic (the Random tab) or Diceware. | Diceware |
| Password copy timeout | Seconds a copied password stays in the clipboard, and an open entry stays on screen. 0 means forever. | 45 seconds |
| Show the password | Whether a decrypted password is visible right away. Copying still works when it is hidden. | On |
| Automatically copy password | Copies the password as soon as an entry is decrypted. | Off |
Repository
| Setting | What it does | Default |
|---|---|---|
| Rebase on pull | On, your local commits go on top of the server’s. Off, a merge commit is made instead. | On |
| Edit Git server settings | Changes the repository URL and how you log in. | - |
| HTTP(S) proxy settings | Sets a proxy. Shown for HTTPS remotes only. | - |
| Local Git config & utilities | Commit name and email, commit log, and the recovery tools described in Sync. | - |
| Import SSH key | Reads a private SSH key from a file. | - |
| Generate SSH key pair | Makes a new SSH key on the phone. | - |
| View generated public SSH key | Shows the public half, to add to your server. | - |
| Delete repository | Deletes the local copy of the store. The server’s copy is not touched, and neither are local commits you did not sync: those are gone. | - |
Misc
| Setting | What it does | Default |
|---|---|---|
| Export passwords | Copies the store, still encrypted, to a folder you choose. | - |
| Workaround clipboard history feature | On phones with a clipboard history, fills it with numbers to push passwords out. | Off |
| Debug logging | Turns on debug logs, after an app restart. Release builds only. | Off |
PGP settings
| Setting | What it does | Default |
|---|---|---|
| Key manager | Lists imported keys, imports new ones and deletes old ones. | - |
| Encrypt in ASCII armor mode | Writes entries as text instead of binary. Leave it off unless you know you need it. | Off |
| Enable passphrase caching | Remembers the key’s passphrase, so that entries open without asking. Experimental, and needs an active screen lock. | Off |
| Automatically clear passphrase cache | Forgets the passphrase when the screen turns off. | On |