Alien Investor
👽 Alien Investor | ₿ Bitcoin · Privacy · Freedom
⚡ Satirist · 🛸 UFO-Pilot
💸 Support: alien-investor.org/spenden.html
📜 My Mission: alien-investor.org/mission.html
📬 Newsletter: alien-investor.org/newsletter.html
Published Apps
- Alien Pass Alien Pass is a local, encrypted password manager. It runs fully offline — no cloud, no server, no account, no telemetry. The app requests no INTERNET permission — only the two normal permissions for the fingerprint sensor (USE_BIOMETRIC, USE_FINGERPRINT up to Android 8.1). Your passwords never leave the device in plaintext. Features: Four entry types: logins (title, username, optional e-mail, password, URL, notes, TOTP), encrypted notes, cards (holder, number, expiry, CVV, PIN — masked, copyable) and bank accounts (holder, IBAN, BIC, bank, PIN); favourites; instant search Extra fields, always secret (v1.4): up to eight freely named fields per entry (app PIN, phone password, security question …), revealed only on request, each with its own copy button — nothing has to sit in the notes in plain text Categories like folders: filter chips above the list, suggestions from existing ones Argon2id key derivation (32/64/128 MiB, self-benchmarked at setup) + AES-256-GCM via WebCrypto; a random data key is wrapped by your passphrase, file header authenticated (AAD) Auto-lock after inactivity and in the background (immediately up to 5 min) Clipboard auto-clear (15/30/60 s) — on timeout, on return to the app and on lock (with "lock in background: immediately" the copied item stays until the timeout, so it can still be pasted elsewhere); copied content is flagged sensitive so the Android 13+ system preview hides it. Since v1.22 both also apply to copy and cut via Android's selection bar (entries such as "Share" hand the text straight to another app, without the clipboard) Asks the keyboard app not to learn from the app's fields (v1.22; Gboard then shows its incognito icon) — only a request, not every keyboard honours it Password generator: characters (8–64) and Diceware (EFF Large Wordlist), entropy shown — also right inside the entry form (panel under the password field, same settings as the generator tab) TOTP per entry (RFC 6238, SHA-1/256/512, 6–8 digits) with remaining time Password health: reused, short and predictable passwords flagged (repeats, sequences, keyboard runs, years, common words also in leetspeak) — computed locally, an honest estimate; asks before accepting a predictable vault passphrase; no forced rotation by age (NIST SP 800-63B) Multi-select (v1.9): checkboxes on every row, move several entries to the trash with one shared "Undo", set a category or mark favourites; "Undo" right after deleting a single entry (six seconds). All confirmations are in-app dialogs since v1.9 — the Android system dialog does not inherit FLAG_SECURE, a screenshot with an open delete prompt showed the entry title Trash (v1.5): deleted entries stay restorable for 30 days, up to 200 at a time; the trash shows only title, type and date of deletion, never the content. "Delete permanently" destroys an entry right away. The trash is device-local: a deletion travels to your other devices when merging, the content does not. Encrypted .vault backup and merge between devices (newer change wins, deletions carried for a year) — you move the file yourself, we recommend Syncthing (no account, no cloud storage); a USB cable or stick works just as well. The app never reads a sync folder on its own. Import Proton Pass exports directly — PGP-encrypted (recommended), ZIP or JSON — with a small built-in OpenPGP reader (own AES block cipher, checked against FIPS-197 and WebCrypto in the test suite); vaults become categories, cards and notes come along, hidden custom fields become secret extra fields, a second e-mail address goes into the e-mail field CSV import from Google Password Manager/Chrome, Apple Passwords, Firefox, KeePassXC, Bitwarden, LastPass, 1Password, NordPass and Proton Pass (v1.10; detected by header, folders/groups/tags become categories, favourites and TOTP come along; with "lock in background: immediately" the chosen file is imported right after unlocking) Optional Aegis hurdle: an extra TOTP code on unlock (honestly documented as a hurdle, not a second factor) Optional fingerprint unlock (Android keystore; passphrase required after a passphrase change or a new fingerprint, and after every restart unless you tick "also after a restart" when enabling (v1.8, off by default, the choice is authenticated inside the slot); honestly documented: any strong biometric of the device counts, with a confirmation tap) Linux desktop edition (Flatpak without network permission, since v1.7) with optional quick unlock by PIN after a lock (v1.8, in memory only, at most 24 hours, honestly documented) — see the GitHub release No INTERNET permission; only USE_BIOMETRIC and USE_FINGERPRINT (up to Android 8.1) for the fingerprint sensor (plus the AndroidX-generated signature permission that grants nothing), FLAG_SECURE (no screenshots / recents preview), allowBackup=false + data extraction rules (no cloud, adb or D2D backup), WebView excluded from the Android autofill framework (a third-party autofill service never sees the passphrase fields) Strict CSP: connect-src 'none', no inline script; bundled Argon2 (hash-wasm) hash-checked in the build German / English, offline in-app manual, open source (MIT) Signing certificate SHA-256 (verify with AppVerifier), identical for every version: 73:C7:17:D8:05:6C:6A:02:B0:8B:AB:BA:24:18:17:F3:93:E4:6D:EA:03:19:D4:FA:26:B8:C3:D8:E1:F9:3C:95 apksigner (no separators): 73c717d8056c6a02b08babba241817f393e46dea0319d4fa26b8c3d8e1f93c95
- BTC Steuertool BTC Steuertool turns CSV exports from your BitBox wallets and brokers into annual tax reports for the German tax office (private sales under § 23 EStG). Everything is calculated on the device: no upload, no account, no tracking. The app has no INTERNET permission; the only permission in its manifest is the AndroidX-generated signature permission of the app itself, which grants nothing. Features: FiFo method per wallet (German Federal Ministry of Finance letter of 06.03.2025, para. 62); the app treats every exchange account as a wallet of its own. On transfers between your own wallets, purchase date and cost travel along (the letter does not spell this out; the evidence document discloses the reading). One-year holding period counted by calendar date (§§ 187, 188 BGB), tax-free and taxable per lot Transfers are matched automatically (transaction ID, otherwise amount and time); unmatched outgoing transfers are reported, never silently booked as sales. Internal wallet check report with real wallet names, never part of the documents for the tax office Exemption limit applied automatically (600 EUR up to 2023, 1,000 EUR from 2024) Supported sources: BitBox wallets, 21bitcoin, Bison, Swissquote, Strike, Pocket, Bisq 1 (German or English interface), plus manual buys/sells as CSV. Other exchanges via a CoinTracking or Blockpit export (every account in it becomes a wallet of its own; these formats are derived from the documentation and not yet confirmed against real exports, the report says so). Wallet exports from Sparrow, Electrum, Trezor Suite and Ledger Wallet (formerly Ledger Live): every wallet or Ledger account is a holding of its own; derived from the programs' source code and not yet confirmed against real exports, the report says so Brokers are detected from the file contents; ZIP files are unpacked; files the app cannot recognise block the calculation instead of silently missing from the report. Every file is checked for its required columns before reading: a renamed column stops the run with file, line and column instead of silently dropping data; a byte-order mark (e.g. after saving in Excel) is read correctly Network fees paid in bitcoin are treated as a disposal of the fee amount at the daily closing price; gifts and donations (marked in the BitBox note) leave your holdings without counting as a sale noKYC purchases (Bisq, manual buys not marked as KYC, noKYC wallets) are kept strictly apart: separate FiFo pool and a separate internal report, never part of the documents for the tax office Output: tax report, formal tax evidence document, buys/sells as CSV — saved through the Android save dialog Bug report with an optional diagnosis: detected file types and the messages of the last calculation, without file names, amounts, exact dates, addresses or wallet names (years and line numbers remain); you see it in full before sending. The full log can be saved for yourself ECB exchange rates (USD/CHF) and BTC daily closing prices are bundled; nothing is downloaded Same calculation core as the open-source command-line tool and the web version (Python via Pyodide), reports byte-identical Screenshots blocked (FLAG_SECURE), no backup of app data, offline in-app guide in German and English Reports are in German (they are meant for the German tax office); the interface is German / English No tax advice: the app is a calculation aid, responsibility for the tax return stays with you. Open source (MIT). Signing certificate SHA-256 (verify with AppVerifier), identical for every version: 26:C5:E0:94:A8:B7:65:0C:A6:65:01:4D:0C:3A:8B:A6:82:B1:7C:05:F5:3C:6C:DE:F0:55:D0:7C:E9:84:BF:0B apksigner (no separators): 26c5e094a8b7650ca665014d0c3a8ba682b17c05f53c6cdef055d07ce984bf0b
- Alien Notes Alien Notes is a local, encrypted app for notes, checklists and sketches. It runs fully offline — no cloud, no server, no account, no telemetry. The app requests no INTERNET permission — only the two normal permissions for the fingerprint sensor (USE_BIOMETRIC, USE_FINGERPRINT up to Android 8.1). The app itself never sends anything and only hands out plaintext when you trigger it, for example by copying or by saving a note as a file. Sister app of Alien Pass and Sachwert-Tresor. Features: Notes (free text, up to 100,000 characters) and checklists (up to 200 entries with boxes, "done to the bottom", "clear ticks"; since 1.9 long entries wrap, Enter splits an entry at the cursor and pasted text with several lines becomes several entries); switch a note between the two — lines become entries and back, with a warning whenever something would be shortened Sketches (since 1.14): draw with a finger (with the mouse on the Linux desktop) on a portrait canvas — freehand, line, arrow, rectangle, ellipse, triangle and hexagon; three stroke widths, solid or dashed, four colours (cyan, yellow, red, white); a stroke eraser, ↶/↷ per stroke, "clear all" with a confirmation, an optional grid with snapping. A second finger cancels the current stroke. Stored as lines (numbers, vector data) in the same encrypted file, not as images; up to 1000 strokes per sketch. Copy and "As file" are not available for sketches No save button: the app saves as you type (after 1.5 s) and when you leave the note — encrypted, the whole file every time; the title may stay empty, the first line then serves as the title Undo and redo while editing (since 1.10): ↶ and ↷ at the top of the editor take back up to 50 steps of the open note (fewer for very long notes) and bring them back, including a checklist entry removed with ✕; the history lives only in memory, closing the note, opening another one and locking clear it; with a keyboard (desktop, or attached to the phone) Ctrl+Z, Ctrl+Shift+Z and Ctrl+Y use the same history Markdown preview per note (off by default): headings, bold, italic, lists, boxes, code, rules — a small own subset, no third-party renderer, no HTML, links stay plain text; a cheat sheet in the editor shows "type this → looks like this" Categories like folders (filter chips, suggestions, rename a category with all its notes), favourites, pinned notes, search across title, text, checklist entries and category, "insert date", an "Open" chip for checklists with unfinished entries Moving from Standard Notes (since 1.1): reads a decrypted Standard Notes backup — the downloaded ZIP directly or the text file inside — and turns plain, Markdown, code, rich-text and Super notes into notes, checklists into checklists, the first tag into the category; 2FA (Authenticator) entries, spreadsheets and files are never imported; a second import creates no duplicates Select several notes at once (since 1.1): trash (with one "Undo" for all, at most 200 at once), set a category (since 1.9 the existing ones are offered right away as a list) or the favourite mark "Undo" after deleting (six seconds), "no preview" per note (the list shows only the title), three font sizes, and every confirmation is an in-app dialog — the Android system dialog does not inherit the screenshot protection Copy puts the whole note into the clipboard; auto-clear after 15/30/60 s (default 30 s, can be switched off) and on lock; copied content is flagged sensitive so the Android 13+ system preview hides it. With "Lock in background: immediately" the copied note stays until the chosen time runs out so it can still be pasted into another app (since 1.3); since 1.13 all of this also applies to text copied or cut via Android's selection bar Asks the keyboard app not to learn from what you type (since 1.13; Gboard then shows its incognito icon — only a request, not every keyboard honours it) As file (since 1.12): saves the open note as a Markdown file (.md, the same text as Copy) through the share sheet; the file is not encrypted, so the app asks first; the file name only carries date and time, never the title; the backup always stays encrypted Locking, more relaxed than a password manager: by default no lock after inactivity and in the background only after 30 minutes (both adjustable up to "never" / "immediately"); "Lock now" clears the key and everything on screen at once; the file is always encrypted. With "immediately" the Android app also locks while the file picker is open — unlock within five minutes and the import continues with the chosen file (since 1.2) Trash: deleted notes stay restorable for 30 days, up to 200 at a time; shows only title, type and date, never the content; device-local — a deletion travels to your other devices when merging, the content does not Encrypted .notes backup and merge between devices (newer change wins, deletions carried for a year), also between phone and Linux desktop. Since 1.14 the file carries format version 2: older app versions reject it with "newer app version" instead of silently dropping sketches when merging — update phone and desktop together; older backups still import Optional Aegis hurdle: an extra TOTP code on unlock (key or otpauth link to copy, no QR; honestly documented as a hurdle, not a second factor) Optional fingerprint unlock (Android keystore, passphrase required after every restart unless "also after a restart" is ticked, off by default) and optional quick unlock by PIN on the Linux desktop — both taken over from Alien Pass and documented there Screenshots and app-switcher preview blocked by default (FLAG_SECURE), can be switched off in Settings — notes are not always secret; locked and during setup the protection is always on Argon2id key derivation (32/64/128 MiB, self-benchmarked at setup) + AES-256-GCM via WebCrypto; own file format AINV1 with its own keys — Alien Pass rejects a notes file and vice versa Notes file in the private app folder, written atomically (temp file, fsync, rename) — never a half-written file; 20 MB file limit enforced on save as well, an oversized file still opens so you can tidy up Linux desktop edition (Flatpak without network permission and without file access, GPG-signed checksum) — on the download page and in the GitHub release No INTERNET permission; only USE_BIOMETRIC and USE_FINGERPRINT (up to Android 8.1) for the fingerprint sensor (plus the AndroidX-generated signature permission that grants nothing), allowBackup=false + data extraction rules (no cloud, adb or D2D backup), WebView excluded from the Android autofill framework (a third-party autofill service never sees the passphrase fields, since 1.4) Strict CSP: connect-src 'none', no inline script; Markdown rendered only via createElement/textContent; bundled Argon2 (hash-wasm) hash-checked in the build; internal security audit of the new surface before release (no independent audit) German / English, offline in-app manual, open source (MIT) Signing certificate SHA-256 (verify with AppVerifier), identical for every version: F3:68:F9:0B:F8:DF:8C:55:BB:6C:28:6D:32:25:BA:8A:F4:45:22:7B:A6:9B:36:00:DF:BB:F6:A1:44:09:BA:7C apksigner (no separators): f368f90bf8df8c55bb6c286d3225ba8af445227ba69b3600dfbbf6a14409ba7c
- Sachwert-Tresor Sachwert-Tresor is a local, encrypted vault for tracking your Bitcoin, gold and silver holdings. It runs fully offline — no cloud, no server, no telemetry, no price lookups over the network. Your data never leaves the device in plaintext. Features: No INTERNET permission — the OS itself guarantees the app cannot phone home; verify it right in the APK manifest (since v2.0). Its only system permission is USE_BIOMETRIC for the optional fingerprint unlock (v3.0), plus USE_FINGERPRINT, brought in by androidx.biometric and limited by the app to Android 8.1 and below. The also-listed ...DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION is an app-internal AndroidX signature permission with no system access. The build aborts if the finished APK requests any other permission FLAG_SECURE: no screenshots, no screen recording, no preview in recents (v2.0); no backup and no device-to-device transfer of vault data (v3.0); WebView excluded from the Android autofill framework, a third-party autofill service never sees the passphrase fields (v3.6.1) AES-256-GCM encryption (native WebCrypto); since v3.0 the key is derived with Argon2id (64 MiB, 3 passes), far costlier to brute-force on GPUs than the former PBKDF2. Older vaults and backups keep opening and are switched over automatically Optional fingerprint unlock (v3.0, Android Keystore): convenient, but it can be forced, and it is no extra factor. The passphrase is required after every reboot, after a passphrase change (fingerprint unlock is then off and must be re-enabled), after "Lock now" and whenever a new fingerprint is enrolled in Android — the app then switches fingerprint unlock off and warns you Failed-attempt brake (v3.0): a growing wait after 3 wrong attempts Optional 2FA (Aegis / TOTP, RFC 6238) with a self-contained QR encoder Bitcoin: buys, sells and withdrawals; gold and silver by count × denomination Multi-currency entries (EUR / USD / CHF), totals kept separate per currency — still zero network lookups (v2.1) Manual current-value calculation — you enter prices yourself, nothing is fetched Wealth over time (v2.12): every price you enter is remembered with its date, and the history tab draws the value of your holdings next to your cost basis — period switches (YTD/1Y/3Y/5Y/MAX) and a tap-to-read tooltip. Still zero network lookups: only your own price points are used, and before the first one there is deliberately no value line Encrypted .vault backup, peer-to-peer sync via Syncthing (no cloud) CSV export compatible with the BTC tax tool (KYC / noKYC kept separate) Fully bilingual (German / English), offline in-app manual included Open source (MIT) — Argon2id from the open-source hash-wasm library (MIT, checked against a pinned SHA-256 at build time); no external CDNs, no trackers Signing certificate SHA-256 (verify with AppVerifier), identical for every version: 66:0F:21:0C:7A:28:9F:38:8B:B4:81:2C:23:82:5A:77:F1:FC:84:E6:A7:EE:58:D6:42:81:B6:BF:5C:D8:79:88 apksigner (no separators): 660f210c7a289f388bb4812c23825a77f1fc84e6a7ee58d64281b6bf5cd87988
- Alien Fitness A minimal, fully offline workout tracker. No account, no server, no tracking — the APK has no internet permission at all, so your data cannot leave your device. Features: Create your own training plans: any exercise, sets, reps and rest — edit any time Ad-hoc free workouts: start empty, add exercises on the fly, save when done Built-in plans: strength (Push / Pull / Legs) and HIT (Tabata, Power) Live session logging with automatic rest timer, corrections supported "Last time" shown and pre-filled for every set — progressive overload at a glance HIT intervals: timed sets run with a work timer, rest and auto-chained next set Interrupted workouts survive an app kill — resume, save or discard Session details with every set, a free-text note and delete Progress charts per exercise (max weight / reps or seconds over time) Exercise library with images, muscle groups and equipment JSON backup: export and import (merge with duplicate detection, or replace) German and English interface, switchable in-app Dark neon UI, screen stays awake during a workout, timer ends with beep and vibration Works completely offline. Built-in plans use bodyweight, pull-up bar and dumbbells — no gym required. Signing certificate SHA-256 (verify with AppVerifier), identical for every version: 85:9E:88:B7:43:5F:84:1D:8B:C1:CF:F1:FE:A9:12:56:A6:33:DE:A5:59:D9:5A:91:02:4B:22:53:A2:AD:13:26 apksigner (no separators): 859e88b7435f841d8bc1cff1fea91256a633dea559d95a91024b2253a2ad1326
- Ausgaben-Tracker A minimal, fully offline personal expense tracker. No account, no server, no tracking — all your data stays encrypted on your device and never leaves it. Features: NO permissions at all — not even INTERNET. The OS itself guarantees the app cannot phone home; verify it right in the APK manifest (since v1.5) FLAG_SECURE: no screenshots, no screen recording, no preview in recents (v1.5) WebView excluded from the Android autofill framework: a third-party autofill service never sees the passphrase fields and cannot offer to save them (v1.10) Monthly overview: fixed costs, variable expenses, comparison to previous month Annual overview (12-month table) Fixed-cost management (monthly / yearly, historically correct active/inactive state) CSV export (Excel / LibreOffice / Sheets) incl. a deduplicated fixed-cost summary Tax usage per fixed cost (private / business / partial) Debts / liabilities (v1.6): note open payments with amount, due date and note, tick them off, overdue items highlighted — optionally book a settled item as an expense Encrypted vault: master password, AES-256-GCM, key via PBKDF2-SHA256 (600k iterations), auto-lock after inactivity Encrypted .vault backup: export and import to move between devices — the import asks for the backup's password and only replaces existing data once the backup opens (v1.7); if the app auto-locks while the file picker is open, the restore continues after unlocking (v1.11) Settings tab (v1.7): auto-lock 0/1/5/15/30 min, lock now, change master password, black (neon) or soft (navy) theme, manage your own categories, version display Overview by category with search and category filter (v1.7) Built-in manual; German and English, follows the system language on first start, switchable in-app Alien-Investor family design (Orbitron / Share Tech Mono, bundled locally), mobile-first; dropdowns and the search clear button in the app's own style instead of grey system lists (v1.8) Confirmations in the app's own style instead of the Android system dialog, which was not covered by the app's screenshot protection; "Undo" for six seconds after deleting an expense (v1.9) Works completely offline — built entirely on native WebCrypto, no external dependencies. Signing certificate SHA-256 (verify with AppVerifier), identical for every version: DB:C5:08:71:53:B4:59:21:82:DD:13:1A:73:0C:11:A0:F7:12:4E:34:42:6C:54:2B:4B:A6:88:5A:B1:CC:01:0E apksigner (no separators): dbc5087153b4592182dd131a730c11a0f7124e34426c542b4ba6885ab1cc010e
Stacks
No stacks created
Activity
Loading activity…
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...
Loading...