FiOTP

FiOTP is a versatile and secure offline authentication solution designed for multiple platforms, including macOS, iOS, Linux, Windows, and Android. This application utilizes Time-Based One-Time Password (TOTP) and HMAC-Based One-Time Password (HOTP) algorithms to enhance security. User accounts are securely stored in a local vault that is encrypted using AES-256-GCM, ensuring that sensitive information remains protected.

Key Features

• Cross-Platform Compatibility: Designed to run seamlessly on macOS, iOS, Linux, Windows, and Android, making it versatile for users on different operating systems.
• Offline Functionality: Operates entirely offline, generating verification codes directly on the device without needing an internet connection.
• Secure Storage: Utilizes a local vault encrypted with AES-256-GCM to safeguard user information and maintain privacy.

Technology Stack

FiOTP is built using GeaStack with TypeScript and TSX. This technology stack enables efficient compilation and a rich user interface. For Android, a native application is implemented with Kotlin and Jetpack Compose, ensuring optimized performance on mobile devices.

Development

The application is designed for developers and includes a comprehensive build process. It supports:

• Building applications for various platforms, including macOS and Windows, using specific commands such as:

  npm run build:macos  # Build the macOS application
  npm run build:windows  # Build the Windows application
  npm run build:android # Build the Android debug APK
  

• Testing and development scripts to ensure high code quality and performance:

  npm test             # Run OTP and native vault tests
  npm run dev          # Start the web interface preview
  

Usage Instructions

1. On the first launch, create a new vault or select an existing encrypted vault file.
2. Unlock the vault using its master password. New vaults start empty and do not contain sample accounts.
3. Add an account by manually entering details, pasting an otpauth:// URI, or scanning a QR code.
4. For TOTP accounts, select a code to copy; for HOTP accounts, utilize the counter control to advance.
5. Manage accounts effectively with search, categories, and favorites. The application also supports encrypted backup and import functionalities.

Project Structure

The project is organized into distinct directories:

Path	Responsibility
src/App.tsx, src/stores/	Interface and application state
src/crypto/, src/services/	OTP generation and encrypted vault operations
native/	Host integrations for Apple, Linux, and Windows
android/app/src/main/java/	Native Android UI implementation and integrations

FiOTP stands out as an effective solution for generating time-based and HMAC-based one-time passwords, ensuring both security and user convenience across various devices. By employing advanced encryption techniques and providing a user-friendly interface, it offers a reliable authentication method for personal and professional use.