• v0.1.0 1f50fcaef4

    TouchPass 0.1.0
    All checks were successful
    CI / ci (push) Successful in 10m1s
    CI / audit (push) Successful in 17s
    CI / qml (push) Successful in 46s
    Stable

    claude-bot released this 2026-10-13 22:22:54 +00:00 | 4 commits to main since this release

    First release: a native Ubuntu Touch client for the pass password store, fully confined, with OpenPGP in-process and git sync. English only.

    Download: touchpass.aps_0.1.0_arm64.click (framework ubuntu-touch-24.04-1.x, arm64), built from 1f50fcaef4.
    sha256: d37eb4cc63428a7796625239bf8288c2ba0910eaba26cbb21558c6fe4fc9744e

    Added

    • Setup wizard. Generate a key (passphrase optional) or import an exported one through the system file picker, then create a new store, or clone an existing one from git over SSH with a deploy key. A cloned store without .gpg-id is set up in place, and a wrongly cloned store can be started over once the remote has everything.
    • Browse and search. The store opens folder by folder; search finds entries in the current folder and below.
    • View entries. Decrypted in-process with rPGP; the password stays hidden until toggled, and the other lines (user, URL, notes) are shown. A protected key's passphrase is asked once and kept in memory only, until Lock or the app exits.
    • Copy password to the system clipboard. It's cleared when you come back to TouchPass after pasting, or after 45 s if you stay.
    • Add, edit, rename and delete entries, with a password generator (length, character classes, your own symbols, look-alike characters left out). Entries keep the pass layout, so they read the same in pass and browserpass. A rename moves the entry like pass mv. Delete asks first. Saving is refused if a sync changed the entry since you opened it.
    • Git sync with the remote the store was cloned from. It runs on open, on coming back to the app, and after you add, edit, rename or delete an entry. Network failures are retried with backoff (and a few seconds after the phone is back online); other failures wait for you. The first connection asks you to trust the server's host key. A Settings page switches sync on open, sync after changes, and automatic retry on or off. Conflicts resolve per entry to the newer change, deletes included; the other version stays in git history. Entries whose recipients no longer match .gpg-id are re-encrypted after a merge. The Sync dialog says what was resolved, or why a sync failed.
    • About in the ☰ menu: version, the commit it was built from, author, license and a link to the source.
    • Follows the system light/dark theme, live.
    • Fully confined (connectivity, content_exchange and networking policy groups only), for framework ubuntu-touch-24.04-1.x, arm64.

    Known limitations

    • Syncs only run while the app is open; Lomiri suspends apps in the background.
    • The key's passphrase runs through S2K on every decrypt (the unlocked key isn't cached yet).
    • The passphrase stays cached until Lock or exit; there's no idle timeout yet.
    • A copied password is cleared only once you come back to TouchPass (or 45 s later if you stay); Lomiri suspends the app meanwhile, and Lock or exit don't clear it.
    • No public-key import for shared stores, and no OTP support yet.

    See CHANGELOG.md.

    Downloads