Einmal
/ˈainmaːl/
German: once
The minimalistic, secure and open-source two-factor authentication app.
Features
- ♻️ Cross-platform — available on Android & iOS (coming soon)
- 🔒 Encryption by default — your vault is never stored in plaintext
- 👱♂️ Biometric unlock — decrypt your vault using biometrics
- 🚀 Import & export vault — back up your vault securely anywhere you like
- 🙈 Discreet mode — conceal your tokens in public
- 📸 Screenshot protection — immune to screen-capturing malware
- 🏴 AMOLED dark theme — because why would you have it any other way?
Supported Algorithms
- ⏱ 6-digit time-based one-time password (TOTP) authentication (RFC 6238)
Security
- Encryption & message authentication: NaCl's XSalsa20-Poly1305 (JavaScript port)
- Key derivation: scrypt (Go implementation)
- Entropy: Java's SecureRandom | Objective-C's SecRandomCopyBytes
Tech
- React Native (mostly using Expo)
- To support both Android & iOS
- Go Mobile
- To offload the blocking key derivation workload to the UI thread
- To write once in Go and generate bindings for both Android & iOS
- To utilize Go's outstanding crypto package
Roadmap
- [x] Facilitate biometric unlock
- [ ] Facilitate manual key entry
- [ ] Facilitate web/CLI vault decryption (escape hatch)
- [ ] Offload encryption to Go
- [ ] Design light theme
- [ ] Produce iOS build
- [ ] Write tests
Screenshots
Feedback
Your feedback is most welcome! Please get in touch by email: support@incipher.io.