A free, secure and open source app for Android to manage your 2-step verification tokens.

android hacktoberfest 2fa authenticator encryption fingerprint hotp otp secure totp

You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Go to file

Alexander Bakker 68bb2b7e17 Release v1.0.3		5 years ago
.github/ISSUE_TEMPLATE	Add basic contribution guidelines, issue templates and a guide for ADB	6 years ago
app	Release v1.0.3	5 years ago
docs	Add a document detailing Aegis' security design and vault format	6 years ago
gradle/wrapper	Add AboutActivity	6 years ago
metadata/en-US	Fix bold in full_description.txt for F-Droid	6 years ago
scripts	Add simple example script to decrypt an Aegis vault	6 years ago
testdata	Update testdata file to use 'test' as the password	6 years ago
.gitignore	Add .idea/ and release/ to .gitignore	6 years ago
.travis.yml	Add Travis CI configuration	6 years ago
CONTRIBUTING.md	Add basic contribution guidelines, issue templates and a guide for ADB	6 years ago
LICENSE	Initial commit	9 years ago
README.md	Update README.md	6 years ago
build.gradle	Introduce UUIDMap for storing objects that are keyed by a UUID	6 years ago
gradle.properties	Migrated project to AndroidX	7 years ago
gradlew	Initial commit	9 years ago
gradlew.bat	Initial commit	9 years ago
settings.gradle	Request storage permissions in the intro	7 years ago

README.md

Aegis

Aegis is a free, secure and open source 2FA app for Android.

Aegis' security design and vault format is described in detail in this document.

Features

Free and open source
Secure
- Encryption (AES-256)
  - Password (scrypt)
  - Fingerprint (Android Keystore)
- Screen capture prevention
- Tap to reveal ability
Multiple ways to add new entries
- Scan QR code
- Enter details manually
- Import from files
  - andOTP
  - FreeOTP
  - Aegis
- Import from apps (requires root):
  - Google Authenticator
  - Steam
Supported algorithms:
- HOTP (RFC 4226)
- TOTP (RFC 6238)
- Steam (RFC 6238 with custom encoding)
Compatible with Google Authenticator
Organization
- Custom or default icons
- Drag and drop
- Custom groups
- Advanced entry editing
Material design with multiple themes:
- Light theme
- Dark theme
- Amoled / true dark theme
Export (plaintext or encrypted)

Screenshots

Downloads

Aegis is available on the Google Play Store and on F-Droid.

Verification

APK releases on Google Play and GitHub are signed using the same key. They can be verified using apksigner:

apksigner verify --print-certs --verbose aegis.apk

The output should look like:

Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true

The certificate fingerprints should correspond to the ones listed below:

Owner: CN=Beem Development
Issuer: CN=Beem Development
Serial number: 172380c
Valid from: Sat Feb 09 14:05:49 CET 2019 until: Wed Feb 03 14:05:49 CET 2044
Certificate fingerprints:
   MD5:  AA:EE:86:DB:C7:B8:88:9F:1F:C9:D0:7A:EC:37:36:32
   SHA1: 59:FB:63:B7:1F:CE:95:74:6C:EB:1E:1A:CB:2C:2E:45:E5:FF:13:50
   SHA256: C6:DB:80:A8:E1:4E:52:30:C1:DE:84:15:EF:82:0D:13:DC:90:1D:8F:E3:3C:F3:AC:B5:7B:68:62:D8:58:A8:23

Libraries

TextDrawable by Amulya Khare
FloatingActionButton by Dmytro Tarianyk
AppIntro by Paolo Rotolo
Krop by Avito Technology
SpongyCastle by Roberto Tyley
Swirl by Matthew Precious
CircleImageView by Henning Dodenhof
barcodescanner by Dushyanth
libsu by John Wu

License

This project is licensed under the GNU General Public License v3.0. See the LICENSE file for details.

Attribution

The icon is largely based on a design by Freepik from Flaticon.