Version 2.0.0 — Now in Beta

Your Android.
Your Rules.

Custom launcher, device-bound keys, encrypted vault. Every control writes to real Android APIs. When the system refuses, Chameleon tells you — instead of flipping a switch that quietly does nothing.

—
Downloads
—
Active Devices
—
Total Devices
—
Channel Trips

What It Actually Does

Every control writes to a real system setting or calls a real framework service.

Custom Launcher

Full home replacement with app drawer, search, icon packs, gestures, folders, widget hosting.

Device-Bound Keys

Nonce-based keys (NNNN-HHHH-HHHHL) tied to your device ID. Channel trip is the only real gate.

Encrypted Vault

Hardware-backed keystore, AES-256-GCM, QR sync, emergency codes, access policies.

System Monitor

Real-time CPU, RAM, battery, network, thermal, FPS with charts and per-app breakdown.

Backup & Restore

Encrypted (AES-256-GCM), selective, scheduled, verified, with cloud sync option.

Widgets

Key status, system monitor, vault quick-access — all configurable from one screen.

How the Key Works

One key, made fresh each time, tied to your phone.

1. Visit the Channel

The app hands you off to YouTube and remembers that you left. Come back, and it notices.

2. Come Back, Get a Key

On your return the app mints a key instantly. No copying, no browser, works offline.

3. Fresh Every Time

The key carries a nonce (NNNN-), so a renewal is a genuinely different key — not the same 13 chars handed back.

The Honest Limit

Only the channel trip is genuinely checked. YouTube exposes no subscription state to any app, so nothing here claims to verify one. The nonce is chosen on your device, so this is a weaker guarantee than a server-held key would be — but it's the only thing that can be honestly verified without reading your Google account.

Encrypted Vault

Hardware-backed keystore. AES-256-GCM. QR sync. Emergency codes. Access policies.

Hardware-Backed

Master key in Android Keystore. Biometric unlock. Invalidated on biometric enrollment change.

AES-256-GCM

Every vault entry encrypted with unique IV. Authenticated encryption prevents tampering.

QR Sync

Device-to-device vault transfer via animated QR. No cloud, no server.

Emergency Codes

One-time use, 24h expiry, max-uses policy. For when you lose access.

Ready to Make Your Android Yours?

Get your key, install the app, take control.