remeic / einmal

⏱ The two-factor authentication app you deserve.

Einmal

/ˈainmaːl/

German: once

The minimalistic, secure and open-source two-factor authentication app.

Features

• ♻️ Cross-platform — available on Android & iOS (coming soon)
• 🔒 Encryption by default — your vault is never stored in plaintext
• 👱‍♂️ Biometric unlock — decrypt your vault using biometrics
• 🚀 Import & export vault — back up your vault securely anywhere you like
• 🙈 Discreet mode — conceal your tokens in public
• 📸 Screenshot protection — immune to screen-capturing malware
• 🏴 AMOLED dark theme — because why would you have it any other way?

Supported Algorithms

• ⏱ 6-digit time-based one-time password (TOTP) authentication (RFC 6238)

Security

• Encryption & message authentication: NaCl's XSalsa20-Poly1305 (JavaScript port)
• Key derivation: scrypt (Go implementation)
• Entropy: Java's SecureRandom | Objective-C's SecRandomCopyBytes

Tech

• React Native (mostly using Expo)
  • To support both Android & iOS
• Go Mobile
  • To offload the blocking key derivation workload to the UI thread
  • To write once in Go and generate bindings for both Android & iOS
  • To utilize Go's outstanding crypto package

Roadmap

• Facilitate biometric unlock
• Facilitate manual key entry
• Facilitate web/CLI vault decryption (escape hatch)
• Offload encryption to Go
• Design light theme
• Produce iOS build
• Write tests

Screenshots

Feedback

Your feedback is most welcome! Please get in touch by email: [email protected].

License

Creative Commons Zero v1.0 Universal