Android app

The Android app is distributed by invitation while it is being tested: you receive an email to install it with the Firebase App Tester app. There is no iPhone app yet.

Add your account

1. Open the app. In SERVER, leave vault.musubi.ar unless you were told otherwise.
2. Press Add account and sign in with your Musubi identity in the browser that opens. Every account you belong to is added.
3. Type your Master password and press Unlock.

The vault has to exist already: if it says “This account has no vault yet”, set your master password on the web first. See Getting started.

Fingerprint or face

Under the password field, tick the option to also unlock with your fingerprint or face on this phone. It is per account and per phone. From then on the unlock screen offers Unlock with fingerprint. You turn it off in Menu.

Passkey

If you set up a passkey unlock on the web, under Security, the unlock screen also offers Unlock with passkey. It is the same passkey and the same vault key: the phone asks your passkey provider for key material and opens the vault here, without the master password and without the server taking part.

It needs Android 14 or later and a passkey provider that supports the PRF extension. A passkey that does not produce key material proves who you are and cannot open a vault; the screen says so instead of failing quietly.

You can also set one up from the phone: Menu → Passkey unlock → Set up passkey unlock. It asks for your master password once — the passkey wraps it, and an open vault does not keep it in memory — and then Android asks twice, once to create the passkey and once to use it. The second prompt is what hands over the key material.

If the provider refuses with the vault's own address, that server may not be publishing /.well-known/assetlinks.json yet. Without that file no passkey of that domain reaches the app, and the message the provider gives does not say so.

What you can do

• Browse and search your entries, grouped by collection.
• Create entries with New entry and collections with New collection.
• Reveal, copy and change one field at a time.
• Fill logins in other apps and in the browser, once you turn on the autofill service.

Sends, security and administration are only on the web.

Filling in other apps

In Menu → AUTOFILL, turn on the Android autofill service and pick Musubi Vault. Android asks for that itself: an app cannot name itself the autofill service, and it should not be able to — the service sees the forms of every other app.

From then on, a login form offers Musubi Vault above the keyboard. Tapping it opens the vault: you unlock it the way you always do, pick the entry, and the form is filled. The service never opens the vault on its own, and could not — that is what the unlock is for.

A browser hands over the site's domain, and the match is checked against your entry's URLs. An app hands over its package name, and from that there is only a guess — com.spotify.music is probably spotify.com and probably is not for a package that only shares a name. The suggestion is marked as a guess, and nothing is filled until you pick it.

Saving a new login from another app is not offered. An entry lives inside a collection, which is the unit of permission, and that is not a decision to take inside a system dialog that explains neither.

Offline and syncing

The phone keeps an encrypted copy of your vault, so it works without a connection. It syncs when you unlock and when you come back to the app; Sync now in Menu does it at once. The bottom of the list says whether it is up to date or showing the local copy.

If the server cannot be reached, the vault keeps working from the local copy. What you do meanwhile — reveal, copy, fill — is kept on the phone and written to the account's activity log once the connection is back. If it says the device is no longer signed in, add the account again: the vault and its copy stay as they are.

When it locks

Five minutes after the last time you used it. It counts inactivity, not time since you unlocked: while you are tapping around the vault it stays open, and the app syncing on its own does not count as use. Leave the phone and come back later and it is already closed. Lock vault in Menu closes it at once. Switching accounts also locks it.

Accounts and problems

• Forget, in the accounts screen, removes an account from this phone only. The account and its vault are untouched.
• Crash reports are off until you turn on Send crash reports in Menu.
• If something fails, Diagnostics can send what happened to your account's administrators. Nothing is sent until you press Send to support; give them the id the app shows afterwards.