https://github.com/incipher/einmal

⏱ The two-factor authentication app you deserve
https://github.com/incipher/einmal

authenticator multi-factor-authentication two-factor-authentication

Last synced: 2 months ago
JSON representation

⏱ The two-factor authentication app you deserve

• Host: GitHub
• URL: https://github.com/incipher/einmal
• Owner: incipher
• License: cc0-1.0
• Archived: true
• Created: 2018-09-15T21:13:31.000Z (over 6 years ago)
• Default Branch: master
• Last Pushed: 2022-12-11T07:26:28.000Z (about 2 years ago)
• Last Synced: 2024-10-30T21:03:16.130Z (3 months ago)
• Topics: authenticator, multi-factor-authentication, two-factor-authentication
• Language: TypeScript
• Homepage:
• Size: 18.1 MB
• Stars: 80
• Watchers: 1
• Forks: 5
• Open Issues: 20
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

• fucking-open-source-ios-apps - einmal - factor authentication (Security / Password)

README

        


  


  
Einmal


  


    /ˈainmaːl/

  


  


    German: once

  


  
The minimalistic, secure and open-source two-factor authentication app.



## Features

- ♻️ Cross-platform — available on Android & iOS (coming soon)

- 🔒 Encryption by default — your vault is never stored in plaintext

- 👱‍♂️ Biometric unlock — decrypt your vault using biometrics

- 🚀 Import & export vault — back up your vault securely anywhere you like

- 🙈 Discreet mode — conceal your tokens in public

- 📸 Screenshot protection — immune to screen-capturing malware

- 🏴 AMOLED dark theme — because why would you have it any other way?

## Supported Algorithms

- ⏱ 6-digit time-based one-time password (TOTP) authentication [(RFC 6238)](https://tools.ietf.org/html/rfc6238)

## Security

- Encryption & message authentication: [NaCl's XSalsa20-Poly1305 (JavaScript port)](https://github.com/dchest/tweetnacl-js)

- Key derivation: [scrypt (Go implementation)](https://godoc.org/golang.org/x/crypto/scrypt)

- Entropy: [Java's SecureRandom](https://developer.android.com/reference/java/security/SecureRandom) | [Objective-C's SecRandomCopyBytes](https://developer.apple.com/documentation/security/1399291-secrandomcopybytes)

## Tech

- [React Native](https://reactnative.dev/) (mostly using [Expo](https://expo.io/))

  - To support both Android & iOS

- [Go Mobile](https://github.com/golang/go/wiki/Mobile)

  - To offload the blocking key derivation workload to the UI thread

  - To write once in Go and generate bindings for both Android & iOS

  - To utilize Go's outstanding crypto package

## Roadmap

- [x] Facilitate biometric unlock

- [ ] Facilitate manual key entry

- [ ] Facilitate web/CLI vault decryption (escape hatch)

- [ ] Offload encryption to Go

- [ ] Design light theme

- [ ] Produce iOS build

- [ ] Write tests

## Screenshots



  

  



## Feedback

Your feedback is most welcome! Please get in touch by email: [email protected].

## License

Creative Commons Zero v1.0 Universal