Wear OS

Wear OS
View Markdown

Keyguard has a Wear OS app. The watch keeps its own vault, with its own app password, so you can read items and one-time passwords without your phone.

Before you begin

  • A watch with Wear OS 3 or later.
  • To add an account from your phone: Keyguard installed on the paired Android phone and compatible Google Play services on the watch.

Set up Keyguard on the watch

  1. Install Keyguard on your phone and on your watch.
  2. On the watch, open Keyguard.
  3. Enter an app password.
  4. Select Create a vault.
  5. In Settings, select Add account.
  6. Select Bitwarden or KeePass.
  7. Select Login on phone. Keyguard opens Watch setup on your phone.
  8. On the phone, sign in to Bitwarden, or open your KeePass database. The account appears on the watch, but not in the phone’s vault.

For a Bitwarden account, you can select Manual login instead and enter your credentials on the watch.

Use Keyguard as a credential provider

Apps on the watch can sign in with passwords and passkeys from Keyguard. This needs Wear OS 5 (Android 14) or later.

  1. On the watch, in Settings > Autofill, select Credential provider. The watch’s system settings open.
  2. Select Keyguard.

Accounts on the watch

AccountAdd it withAfter setup
BitwardenLogin on phone or Manual loginSyncs with the server on its own
KeePassLogin on phoneKeeps a one-time copy of the database from the phone

Features on the watch

FeatureWhat you can do
Vault, folders and FavoritesBrowse items and read their fields, including the current one-time password. Selecting a field shows it full screen, with a QR code.
AttachmentsPreview images, text, Markdown and ZIP archives
SendView sends
GeneratorGenerate passwords, passphrases and PIN codes
Credential providerSign in to apps on the watch with saved passwords and passkeys

Limitations

AreaLimitation
EditingYou can’t add or edit items on the watch. Edit them on the phone or desktop.
CopyingYou can’t copy values on the watch.
SearchThe watch has no search or filters.
KeePassChanges to the database after setup don’t reach the watch. You can’t choose a local database on the watch.
SSONeither login method offers SSO, so accounts that sign in only with SSO can’t be added.
Two-factor authenticationManual login doesn’t support YubiKey, Duo, Duo (Organization) or FIDO2 Web Authentication. Use Login on phone.
Credential providerIt can’t create passkeys or save new passwords.
F-DroidThe F-Droid repo has no watch app. Install it from Google Play, or install the watch APK from GitHub Releases.

Troubleshooting

”No paired Android phone found”

The watch can’t reach a phone with Keyguard installed. Install Keyguard on the paired phone, check that the watch is connected to it, then select Login on phone again.

If Google Play services is unavailable, reopen Add account to try again. For Bitwarden, Manual login works without the phone connection. KeePass requires Login on phone.