We queried GitHub using the following search terms (January 2024 – June 2025):
Android keyloggerAccessibilityService keyloggerAndroid keystroke recordingInputMethodManager keyloggerInclusion criteria:
We analyzed 25 repositories after filtering out duplicates and non-functional code. Keylogger Github Android
Unlike Windows, Android has strict permission models. A traditional global keylogger is difficult to implement without exploiting vulnerabilities.
Android’s market dominance (≈70% global mobile OS share) makes it a prime target for credential theft. Keyloggers—programs that record keystrokes—have evolved from simple root-dependent tools to sophisticated implementations using official APIs. GitHub hosts hundreds of proof-of-concept (PoC) keyloggers, many of which remain undetected by antivirus solutions. This paper aims to systematically review these open-source projects to understand current threats. The Dark Side and Defensive Potential: A Deep
These are usually small, minimally functional repositories created by security researchers to demonstrate how a vulnerability works. They are often labeled [EDUCATIONAL ONLY].
AndroidKeyloggerPOC, SimpleAccessibilityLogger.If you are analyzing code, look for these packages/classes: Inclusion criteria:
android.accessibilityservice.AccessibilityServiceonAccessibilityEvent (Specifically TYPE_VIEW_TEXT_CHANGED)InputConnection wrappersHttpURLConnection with parameters named log, key, or text.Searching "Keylogger Github Android" yields three primary categories of repositories. Understanding these categories is critical for both security professionals and curious developers.