+++
title = "Settings"
date = 2026-11-05T00:00:00Z
description = "Every HardenedPass setting and what it does, section by section: general, autofill, passwords, repository, misc and PGP."
weight = 90
draft = false
+++

Open **Settings** from the three dots in the list's search bar, or from the welcome
screen. Settings are grouped in six sections.

## General

| Setting | What it does | Default |
|---|---|---|
| **App theme** | Light, dark, or following the system. | System default |
| **Password file organization** | How autofill names the files it saves, for example `work/example.org.gpg` or `work/example.org/alice@example.org.gpg`. | `work/example.org/alice@example.org.gpg` |
| **Password sort order** | Folders first, or recently used first. | Folders first |
| **Disable pull to sync action** | Stops the pull down gesture on the list from starting a sync. | Off |
| **Recursive filtering** | Search also looks inside the folders below the current one. | On |
| **Open search on start** | Opens the search bar when the app starts. | Off |
| **Show all files and folders** | Lists files that are not passwords as well. | Off |
| **Enable biometric authentication** | Asks for your fingerprint when the app starts. See [Security]({{< relref "/hardenedpass/reference/security" >}}) for what this does and does not protect. | Off |

## Autofill

| Setting | What it does | Default |
|---|---|---|
| **Enable Autofill** | Makes HardenedPass the autofill service. See [Autofill]({{< relref "/hardenedpass/using/autofill" >}}). | Off |
| **Default username** | Used when autofill cannot find a username in the entry or its path. | Empty |
| **Custom domains** | Domains whose subdomains autofill treats as separate sites. | Empty |

## Passwords

| Setting | What it does | Default |
|---|---|---|
| **Password generator type** | The generator that opens first: Classic (the Random tab) or Diceware. | Diceware |
| **Password copy timeout** | Seconds a copied password stays in the clipboard, and an open entry stays on screen. 0 means forever. | 45 seconds |
| **Show the password** | Whether a decrypted password is visible right away. Copying still works when it is hidden. | On |
| **Automatically copy password** | Copies the password as soon as an entry is decrypted. | Off |

## Repository

| Setting | What it does | Default |
|---|---|---|
| **Rebase on pull** | On, your local commits go on top of the server's. Off, a merge commit is made instead. | On |
| **Push after each change** | Pushes after saving, moving or deleting in the app. See [Sync]({{< relref "/hardenedpass/using/sync" >}}). | Off |
| **Edit Git server settings** | Changes the repository URL and how you log in. | - |
| **HTTP(S) proxy settings** | Sets a proxy. Shown for HTTPS remotes only. | - |
| **Local Git config & utilities** | Commit name and email, commit log, and the recovery tools described in [Sync]({{< relref "/hardenedpass/using/sync" >}}). | - |
| **Import SSH key** | Reads a private SSH key from a file. | - |
| **Generate SSH key pair** | Makes a new SSH key on the phone. | - |
| **View generated public SSH key** | Shows the public half, to add to your server. | - |
| **Delete repository** | Deletes the local copy of the store. The server's copy is not touched, and neither are local commits you did not sync: those are gone. | - |

## Misc

| Setting | What it does | Default |
|---|---|---|
| **Export passwords** | Copies the store, still encrypted, to a folder you choose. | - |
| **Workaround clipboard history feature** | On phones with a clipboard history, fills it with numbers to push passwords out. | Off |
| **Debug logging** | Turns on debug logs, after an app restart. Release builds only. | Off |
| **Export log** | Saves the app's logs to a file you choose, for a bug report. See [Troubleshooting]({{< relref "/hardenedpass/reference/troubleshooting" >}}). | - |

## PGP settings

| Setting | What it does | Default |
|---|---|---|
| **Key manager** | Lists imported keys, imports new ones and deletes old ones. | - |
| **Encrypt in ASCII armor mode** | Writes entries as text instead of binary. Leave it off unless you know you need it. | Off |
| **Enable passphrase caching** | Remembers the key's passphrase, so that entries open without asking. Experimental, and needs an active screen lock. | Off |
| **Automatically clear passphrase cache** | Forgets the passphrase when the screen turns off. | On |

## About

**About** is not in Settings: open it from the three dots in the list's search bar. It
shows:

- The version. Tap it to copy it, for a bug report.
- Links to the documentation, what's new, the source code, the issue tracker and Ko-fi.
  They open in your browser.
- The privacy statement.
- The signing certificate of the copy you have installed. Tap it to copy it, and compare
  it with the one in [Install]({{< relref "/hardenedpass/getting-started/install" >}}).
- The license, and the licenses of the open source libraries in the app.