What’s new
Hardened cross-profile IPC against untrusted work-profile applications.
- Protected the cross-profile activity with a signature-level permission.
- Hardened authentication key initialization and request validation.
Quick answer
Isolate and run multiple instances of apps using Work Profiles
Haven is a Free and Open-Source app that leverages the "Work Profile" feature of Android to provide an isolated space that you can install or clone apps into.
Haven uses the application id io.github.kennethchoinfosec.haven, so it installs as a separate app and does not upgrade or replace existing installs of the original app.
The main use-cases of Haven include:
- Installing apps inside a work profile for isolation - "Freeze" apps inside the work profile to prevent them from running or being woken up when you are not actively using them - Installing two copies of the same app on the same device
Note that Haven depends on the Work Profile feature of the Android system, so any bugs related to Work Profiles in the Android-derived system you are using will affect Haven. In addition, Haven can only be as secure as the Work Profile implementation.
Screenshots
How to install
- Download the APK from the button at the top of this page.
- Allow “Install unknown apps” for your browser or file manager only, not for every app.
- Open the downloaded file and confirm the installation.
- If installation fails with “App not installed,” remove an earlier build of the same app first. A signature conflict is the usual cause.
Data safety
- Every file is checked against its published SHA-256 before it is listed.
- Files are scanned for malware on every update.
- The permissions each app requests are listed on its own page.
- Read the full safety policy for how we test, flag, and delist files.
Frequently asked questions
What is Haven?
Isolate and run multiple instances of apps using Work Profiles
Who develops Haven?
Haven is developed by Kenneth-Cho-InfoSec.
Which Android version does Haven require?
Haven requires Android API 24 or later.
What is the current version of Haven?
The synchronized F-Droid version is 0.1.4.
Which license does Haven use?
The signed F-Droid metadata lists GPL-3.0-only.
Where is the source code for Haven?
https://github.com/Kenneth-Cho-InfoSec/Haven
Comments
Recent approved comments · sorted by newest
View all comments