Falco

Privacy-respecting Android client for Hetzner Online. Manage Hetzner Cloud, Robot (dedicated servers + Storage Boxes), DNS Console and Object Storage from one secure app.

Falco is community software and is not affiliated with Hetzner Online GmbH. Hetzner is a trademark of Hetzner Online GmbH.

Highlights 100 % free software (GPL-3.0-or-later) — no Google Play Services, no Firebase, no proprietary dependencies. Designed to be reproducibly buildable on F-Droid. Multi-account, multi-project — switch between Hetzner customers and Cloud projects on the fly. Per-account credentials. Hardened storage — credentials in EncryptedSharedPreferences with the master key bound to the Android Keystore (StrongBox-backed when available). Biometric gate — BiometricPrompt (Class 3 / Device Credential) on app start; auto-relock on background timeout. TLS 1.3 only with certificate pinning for every Hetzner endpoint (Cloud, Robot, DNS, Object Storage). Pins are root anchors so they survive Let's Encrypt's leaf rotation cycle. FLAG_SECURE on every screen, allowBackup="false", auto-backup excluded. Localised in 7 languages (en, de, es, fr, it, ru, zh-CN).

Features

Hetzner Cloud Servers: list, detail, metrics, create wizard, power actions, reset password, rebuild, change type, ISO attach/detach, rescue mode, backup toggle, console request, reverse DNS, rename, protection, delete. Volumes: list, create wizard with live price estimate, attach/detach, rename, resize, format, automount, protection, delete. Networks: list, create wizard, subnets add/delete, routes, change IP range, expose to vSwitch, protection, delete. Floating IPs: list, create wizard, assign/unassign, change reverse DNS, protection, delete. Firewalls: list, create, edit rules, apply to / remove from resources. SSH keys: list, create, rename, delete. Primary IPs: list, create, assign/unassign, protection, delete. Load Balancers: list overview (create + actions wired in repo, UI growing). Certificates: upload PEM or request managed (Let's Encrypt) certs, list, delete, retry managed issuance. Placement Groups: list, create, delete. Storage Boxes: full detail screen — list, snapshots, subaccounts, password reset, access toggles (SSH/Samba/WebDAV/ZFS).

Hetzner Robot Servers: rich list (status dot, chips, IPv4/IPv6 with copy, datacenter, paid-until), detail screen, reset (sw/hw/manual), Wake-on-LAN, rescue mode enable/disable, reverse DNS setter, server cancellation + withdraw. Failover IPs: list, route to active server, unroute. vSwitches: list, create, update, delete, attach/detach servers. SSH keys: list, create, delete.

DNS Console Zones: list, create, update, delete, single-zone fetch. Records: list, create, update, delete, single-record fetch, bulk create/update, BIND import/export, validate. Primary servers (secondary zone sources): full CRUD.

Object Storage (S3-compatible) Buckets: list, exists, create, delete. Objects: list (prefix browser), upload via foreground service, download via signed URL, head/stat, copy, delete (single + batch), presigned upload URL. Bucket settings: versioning toggle.