fthomys/Tokn

v1.6.0 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

This release patches 1 known CVE

Topics

2fa 2fa-authentication 2fa-authenticator android android-jetpack-compose auth

+9 more

authenticator f-droid hotp jetpack-compose material-3 mfa-authenticator otp privacy totp

Affected surfaces

auth crypto_tls

Summary

AI summary

Fixes instant code tapping and restores vault encryption with Argon2id.

Type	Severity	Summary	CVE
Feature	Low	Adds import accounts from Stratum. Adds import accounts from Stratum. Source: llm_adapter@2026-06-05 Confidence: high	—
Feature	Low	Adds vault encryption using Argon2id with optional biometric unlock; backup recommended before update. Adds vault encryption using Argon2id with optional biometric unlock; backup recommended before update. Source: llm_adapter@2026-06-05 Confidence: low	—
Performance	High	Fix massive performance issue introduced in 1.6.0 hotfix release. Fix massive performance issue introduced in 1.6.0 hotfix release. Source: granite4.1:30b@2026-06-05-audit Confidence: low	—
Bugfix	Medium	Tapping a code now copies instantly without double-tap timeout. Tapping a code now copies instantly without double-tap timeout. Source: llm_adapter@2026-06-05 Confidence: low	—

Full changelog

Fix: tapping a code is now instant. Single tap no longer waits for the double-tap timeout before copying.
New: encrypt your vault with a password using Argon2id, with biometric unlock as an optional root of trust. (Before updating: create a backup)
New: import accounts from Stratum.

This is a Hotfix release for 1.6.0 which i revoked as it introduced a massive performance issue. This is now fixed

Full Changelog: https://github.com/fthomys/tokn/compare/v1.5.1...v1.6.0

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track fthomys/Tokn

Get notified when new releases ship.

About fthomys/Tokn