SecureGen is an open-source hardware device that combines TOTP authentication and password management. Featuring AES-256 encryption and a BLE keyboard, it provides 7-layer security and works offline, ensuring your sensitive data remains protected. Perfect for those seeking a reliable security solution in a multifunctional package.
SecureGen - Hardware TOTP Authenticator & Password Manager
Open-source security device on ESP32 T-Display. Physical 2FA codes + encrypted password vault + BLE keyboard. Works completely offline.
Why Hardware?
Verifiable Security
- Audit every line of code yourself
- No cloud = no remote attacks
- Physical isolation from internet threats
8-Layer Defense Architecture
- ECDH Key Exchange - P-256 elliptic curve prevents MITM
- Session Encryption - AES-128 BLE + AES-256 application layer
- Dynamic API Endpoints - SHA-256 obfuscation blocks scanners
- Header Obfuscation - Hides tech stack from attackers
- Anti-Fingerprinting - Fake headers mislead reconnaissance
- Honey Pot - Trap endpoints log intrusion attempts
- Method Tunneling - Masks HTTP request patterns
- Timing Protection - Random delays prevent side-channel attacks
Key Features
Security
- AES-256 encryption for data at rest
- Hardware-unique device keys from chip parameters
- LE Secure Connections for Bluetooth (MITM protection)
- PIN-protected startup and BLE transmission
Functionality
- TOTP codes (RFC 6238 compliant)
- Encrypted password manager
- BLE HID keyboard (wireless password typing)
- Web management interface (QR code scanning)
- Complete offline operation
Hardware
- ESP32 T-Display (~$15)
- 1.14" color display
- Battery powered
- Two-button navigation
Perfect For
ā Privacy-conscious users wanting verifiable security ā Self-hosters building secure infrastructure ā Anyone tired of trusting closed-source apps ā Makers learning embedded security
Technical Highlights
- Memory-optimized BLE + WiFi coexistence
- iOS/Android adaptive BLE bonding
- Smart power management (light sleep, WiFi on-demand)
- Cross-platform keyboard layout support
License: MIT (fully open source) Cost: ~$15 hardware + free software
Author here! š
Built this as an open-source alternative to phone-based 2FA apps.
Key differentiators:
- Open source (audit the code)
- Offline capable (air-gapped mode)
- $15 hardware cost
- 8-layer security architecture
Technical highlights:
- Solved BLE + WiFi memory management on ESP32
- Cross-platform BLE bonding (iOS vs Android)
- Defense in depth security (ECDH, honey pots, timing protection)
Demo: https://youtube.com/watch?v=YTVQBwgok_E Code: https://github.com/makepkg/SecureGen
Questions? Fire away! š
Sign in to comment.