Alexander Bakker
b1d9be10f2
This patch adds support for the new backup file format of andOTP. andOTP has
improved their security by switching from SHA-256 to PBKDF2 to derive the key
for encrypted backups.
Glad to see this has been addressed now. Awesome work, @flocke!
See: andOTP/andOTP@d96b037.
(cherry picked from commit a5165e2345)
Aegis
Aegis is a free, secure and open source 2FA app for Android.
Aegis' security design and vault format is described in detail in this document.
Features
- Free and open source
- Secure
- Encryption (AES-256)
- Password (scrypt)
- Fingerprint (Android Keystore)
- Screen capture prevention
- Tap to reveal ability
- Encryption (AES-256)
- Multiple ways to add new entries
- Scan QR code
- Enter details manually
- Import from files
- andOTP
- FreeOTP
- Aegis
- Import from apps (requires root):
- Google Authenticator
- Steam
- Supported algorithms:
- Compatible with Google Authenticator
- Organization
- Custom or default icons
- Drag and drop
- Custom groups
- Advanced entry editing
- Material design with multiple themes:
- Light theme
- Dark theme
- Amoled / true dark theme
- Export (plaintext or encrypted)
Screenshots
Downloads
Aegis is available on the Google Play Store and on F-Droid.
Verification
APK releases on Google Play and GitHub are signed using the same key. They can be verified using apksigner:
apksigner verify --print-certs --verbose aegis.apk
The output should look like:
Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true
The certificate fingerprints should correspond to the ones listed below:
Owner: CN=Beem Development
Issuer: CN=Beem Development
Serial number: 172380c
Valid from: Sat Feb 09 14:05:49 CET 2019 until: Wed Feb 03 14:05:49 CET 2044
Certificate fingerprints:
MD5: AA:EE:86:DB:C7:B8:88:9F:1F:C9:D0:7A:EC:37:36:32
SHA1: 59:FB:63:B7:1F:CE:95:74:6C:EB:1E:1A:CB:2C:2E:45:E5:FF:13:50
SHA256: C6:DB:80:A8:E1:4E:52:30:C1:DE:84:15:EF:82:0D:13:DC:90:1D:8F:E3:3C:F3:AC:B5:7B:68:62:D8:58:A8:23
Libraries
- TextDrawable by Amulya Khare
- FloatingActionButton by Dmytro Tarianyk
- AppIntro by Paolo Rotolo
- Krop by Avito Technology
- SpongyCastle by Roberto Tyley
- Swirl by Matthew Precious
- CircleImageView by Henning Dodenhof
- barcodescanner by Dushyanth
- libsu by John Wu
License
This project is licensed under the GNU General Public License v3.0. See the LICENSE file for details.
Attribution
The icon is largely based on a design by Freepik from Flaticon.