Skip to content

fthomys/Tokn

Secrets & Credentials

A privacy‑focused, encrypted Android app for generating and managing TOTP/HOTP two‑factor authentication codes without accounts or telemetry.

Kotlin Latest v1.5.0 · 1d ago Security brief →

Features

  • Encrypted local vault (SQLCipher) with biometric or password unlock
  • QR‑code scanning and manual entry for adding accounts
  • Device‑to‑device sync over QR, Wi‑Fi, or Wi‑Fi Direct without a server
  • Backup/restore of encrypted vault for migration
  • Custom account icons via gallery import or Aegis‑compatible icon packs

Recent releases

View all 7 releases →
No immediate action
v1.5.0 Breaking risk

Buttons removed

No immediate action
v1.4.3 New feature

Sorting + Export Vault + Import + Multi‑QR Migration

No immediate action
v1.4.2 Bug fix

UI overlap fix

Monitor
v1.4.1 Mixed
Crypto / TLS

Navigation insets + OTP reveal + memory hardening

No immediate action
v1.4.0 New feature

Google Authenticator import + About screen

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
15
Forks
0
Languages
Kotlin Roff

Install & Platforms

Install via
binary brew cargo dnf docker docker-compose flatpak go helm macports npm pacman pip pipx snap shell-script winget zypper
Mobile
Android

Alternative to

Google Authenticator Aegis

Beta — feedback welcome: [email protected]