{"id":49659572,"url":"https://github.com/gitubpatrice/pass_tech","last_synced_at":"2026-05-06T11:06:34.278Z","repository":{"id":354510748,"uuid":"1222682263","full_name":"gitubpatrice/pass_tech","owner":"gitubpatrice","description":"Pass Tech — Gestionnaire de mots de passe Android 100% local. AES-256-CBC + HMAC, PBKDF2 600k, biométrie hardware-bound. Aucun cloud, aucun tracker. Apache 2.0.","archived":false,"fork":false,"pushed_at":"2026-04-28T20:46:35.000Z","size":475,"stargazers_count":0,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2026-04-28T22:27:37.809Z","etag":null,"topics":["aes-256","android","apache-2","flutter","offline-first","open-source","password-manager","privacy"],"latest_commit_sha":null,"homepage":"https://www.files-tech.com/pass-tech.php","language":"Dart","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gitubpatrice.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":"NOTICE","maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2026-04-27T15:50:03.000Z","updated_at":"2026-04-28T20:46:39.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/gitubpatrice/pass_tech","commit_stats":null,"previous_names":["gitubpatrice/pass_tech"],"tags_count":11,"template":false,"template_full_name":null,"purl":"pkg:github/gitubpatrice/pass_tech","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitubpatrice%2Fpass_tech","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitubpatrice%2Fpass_tech/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitubpatrice%2Fpass_tech/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitubpatrice%2Fpass_tech/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gitubpatrice","download_url":"https://codeload.github.com/gitubpatrice/pass_tech/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gitubpatrice%2Fpass_tech/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":32690585,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-05-06T08:33:17.875Z","status":"ssl_error","status_checked_at":"2026-05-06T08:33:17.221Z","response_time":117,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["aes-256","android","apache-2","flutter","offline-first","open-source","password-manager","privacy"],"created_at":"2026-05-06T11:06:32.501Z","updated_at":"2026-05-06T11:06:34.264Z","avatar_url":"https://github.com/gitubpatrice.png","language":"Dart","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003cp align=\"center\"\u003e\n  \u003cimg src=\"assets/icon.png\" alt=\"Pass Tech\" width=\"160\" height=\"160\"\u003e\n\u003c/p\u003e\n\n\u003ch1 align=\"center\"\u003ePass Tech\u003c/h1\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003cstrong\u003eGestionnaire de mots de passe Android 100 % local.\u003c/strong\u003e\u003cbr\u003e\n  Aucun cloud. Aucun tracker. Aucun compte.\n\u003c/p\u003e\n\n\u003cp align=\"center\"\u003e\n  \u003ca href=\"https://github.com/gitubpatrice/pass_tech/actions/workflows/ci.yml\"\u003e\u003cimg src=\"https://github.com/gitubpatrice/pass_tech/actions/workflows/ci.yml/badge.svg\" alt=\"CI\"\u003e\u003c/a\u003e\n  \u003ca href=\"LICENSE\"\u003e\u003cimg src=\"https://img.shields.io/badge/License-Apache%202.0-blue.svg\" alt=\"License: Apache 2.0\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://github.com/gitubpatrice/pass_tech/releases/latest\"\u003e\u003cimg src=\"https://img.shields.io/github/v/release/gitubpatrice/pass_tech?color=green\u0026label=release\" alt=\"Latest release\"\u003e\u003c/a\u003e\n  \u003ca href=\"https://flutter.dev\"\u003e\u003cimg src=\"https://img.shields.io/badge/built%20with-Flutter-02569B.svg\" alt=\"Built with Flutter\"\u003e\u003c/a\u003e\n\u003c/p\u003e\n\n\u003e Vos secrets ne quittent jamais votre téléphone.\n\n---\n\n## Pourquoi Pass Tech\n\nLa majorité des gestionnaires de mots de passe synchronisent vos données via leur cloud — ce qui implique une confiance totale dans le fournisseur. Pass Tech prend le parti opposé : **aucun serveur**, aucun compte, aucune fuite possible côté backend, parce qu'il n'y a pas de backend.\n\n- **100 % local** — base chiffrée stockée uniquement dans la mémoire interne de l'app\n- **Open source** — Apache License 2.0, code auditable\n- **Audit OWASP MASVS** — clôturé, score ~99/100\n- **Aucune permission inutile** — pas d'Internet sauf vérif HIBP optionnelle (k-anonymity)\n\n## Sécurité\n\n| Composant | Choix |\n|---|---|\n| Dérivation clé | PBKDF2-HMAC-SHA256, **600 000 itérations** (OWASP 2023) |\n| Chiffrement | AES-256-CBC |\n| Intégrité | HMAC-SHA256 (encrypt-then-MAC, vérification constant-time) |\n| Biométrie | Android Keystore + BiometricPrompt CryptoObject (clé hardware-bound) |\n| Anti-brute-force | Verrouillage progressif 5 fails (30 s → 30 min) |\n| Captures écran | `FLAG_SECURE` actif |\n| Clipboard | Effacement auto + flag `IS_SENSITIVE` (Android 13+) |\n| RASP | Détection root + émulateur |\n| Wipe RAM | Clé maîtresse effacée après usage et au verrouillage |\n| Updates | SHA-256 publié dans chaque release |\n\nVoir [SECURITY.md](SECURITY.md) pour le signalement de vulnérabilités.\n\n## Fonctionnalités\n\n- Mots de passe avec générateur configurable\n- TOTP 2FA (RFC 6238)\n- Cartes bancaires\n- Notes sécurisées\n- Recherche locale\n- Vérification de fuites HIBP (k-anonymity, optionnelle)\n- Export / import du coffre chiffré\n- Mises à jour vérifiables via GitHub Releases\n\n## Captures d'écran\n\n\u003c!-- Placez les captures dans `docs/screenshots/` et décommentez ci-dessous --\u003e\n\u003c!--\n\u003cp align=\"center\"\u003e\n  \u003cimg src=\"docs/screenshots/01-unlock.png\"  width=\"220\" alt=\"Écran de déverrouillage\"\u003e\n  \u003cimg src=\"docs/screenshots/02-vault.png\"   width=\"220\" alt=\"Coffre\"\u003e\n  \u003cimg src=\"docs/screenshots/03-entry.png\"   width=\"220\" alt=\"Détail d'une entrée\"\u003e\n\u003c/p\u003e\n--\u003e\n\n*Captures à venir.*\n\n## Installation\n\n### Option 1 — Obtainium (recommandé, mises à jour auto)\n\n1. Installer [Obtainium](https://github.com/ImranR98/Obtainium/releases/latest)\n2. Ajouter cette URL : `https://github.com/gitubpatrice/pass_tech`\n\n### Option 2 — APK direct\n\nTélécharger `app-arm64-v8a-release.apk` depuis [la dernière release](https://github.com/gitubpatrice/pass_tech/releases/latest).\n\n**Vérifier l'intégrité** :\n```bash\nsha256sum app-arm64-v8a-release.apk\n```\nLe hash doit correspondre à celui publié dans les notes de release.\n\n\u003e ⚠️ **Samsung One UI 6.1+** : si l'install est bloquée, désactivez temporairement *Réglages → Sécurité et confidentialité → Auto Blocker*.\n\n## Compiler depuis les sources\n\n```bash\nflutter pub get\nflutter build apk --release --split-per-abi\n```\n\nBuild Android exigeant `flutter ^3.x` et un keystore release configuré dans `android/key.properties` (non versionné).\n\n## Documentation\n\n- [LICENSE](LICENSE) — Apache License 2.0\n- [PRIVACY.md](PRIVACY.md) / [PRIVACY.fr.md](PRIVACY.fr.md) — politique de confidentialité\n- [TERMS.md](TERMS.md) / [TERMS.fr.md](TERMS.fr.md) — conditions d'utilisation\n- [SECURITY.md](SECURITY.md) — politique de sécurité et signalement\n- [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) — dépendances tierces\n- [NOTICE](NOTICE) — mentions Apache 2.0\n\n## Liens\n\n- [files-tech.com/pass-tech.php](https://www.files-tech.com/pass-tech.php) — page produit\n- [Releases](https://github.com/gitubpatrice/pass_tech/releases) — APK signés\n- [contact@files-tech.com](mailto:contact@files-tech.com) — support\n\n## License\n\nCopyright 2026 Files Tech / Patrice\n\nLicensed under the Apache License, Version 2.0. See [LICENSE](LICENSE) for the full text.\n\nPass Tech est fourni « tel quel », sans garantie d'aucune sorte. Les mots de passe stockés sont chiffrés avec votre mot de passe maître — **si vous le perdez, les données sont irrécupérables**. Pensez à exporter régulièrement votre coffre chiffré.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgitubpatrice%2Fpass_tech","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgitubpatrice%2Fpass_tech","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgitubpatrice%2Fpass_tech/lists"}