A free, secure and open source app for Android to manage your 2-step verification tokens.
Find a file
Alexander Bakker b1d9be10f2 Add support for the new andOTP backup format
This patch adds support for the new backup file format of andOTP. andOTP has
improved their security by switching from SHA-256 to PBKDF2 to derive the key
for encrypted backups.

Glad to see this has been addressed now. Awesome work, @flocke!

See: andOTP/andOTP@d96b037.
(cherry picked from commit a5165e2345)
2019-12-05 18:33:32 +01:00
.github/ISSUE_TEMPLATE Add basic contribution guidelines, issue templates and a guide for ADB 2019-08-29 21:12:17 +02:00
app Add support for the new andOTP backup format 2019-12-05 18:33:32 +01:00
docs Add a document detailing Aegis' security design and vault format 2019-04-16 20:21:15 +02:00
gradle/wrapper Add AboutActivity 2019-09-07 12:49:31 +02:00
metadata/en-US Fix bold in full_description.txt for F-Droid 2019-04-17 00:00:10 +02:00
scripts Add simple example script to decrypt an Aegis vault 2019-04-16 20:21:15 +02:00
testdata Update testdata file to use 'test' as the password 2019-04-03 15:03:56 +02:00
.gitignore Add .idea/ and release/ to .gitignore 2019-03-27 01:03:55 +01:00
.travis.yml Add Travis CI configuration 2019-09-05 01:12:30 +02:00
build.gradle Introduce UUIDMap for storing objects that are keyed by a UUID 2019-08-03 17:50:25 +02:00
CONTRIBUTING.md Add basic contribution guidelines, issue templates and a guide for ADB 2019-08-29 21:12:17 +02:00
gradle.properties Migrated project to AndroidX 2018-09-25 16:26:57 +02:00
gradlew Initial commit 2016-08-15 21:29:41 +02:00
gradlew.bat Initial commit 2016-08-15 21:29:41 +02:00
LICENSE Initial commit 2016-08-15 21:29:41 +02:00
README.md Update README.md 2019-04-18 17:02:56 +02:00
settings.gradle Request storage permissions in the intro 2017-12-13 19:00:22 +01:00

Aegis

Aegis is a free, secure and open source 2FA app for Android.

Aegis' security design and vault format is described in detail in this document.

Features

  • Free and open source
  • Secure
    • Encryption (AES-256)
      • Password (scrypt)
      • Fingerprint (Android Keystore)
    • Screen capture prevention
    • Tap to reveal ability
  • Multiple ways to add new entries
    • Scan QR code
    • Enter details manually
    • Import from files
      • andOTP
      • FreeOTP
      • Aegis
    • Import from apps (requires root):
      • Google Authenticator
      • Steam
  • Supported algorithms:
  • Compatible with Google Authenticator
  • Organization
    • Custom or default icons
    • Drag and drop
    • Custom groups
    • Advanced entry editing
  • Material design with multiple themes:
    • Light theme
    • Dark theme
    • Amoled / true dark theme
  • Export (plaintext or encrypted)

Screenshots

Main Activity Settings Activity Edit Activity

Main Activity Main Activity

Downloads

Aegis is available on the Google Play Store and on F-Droid.

Get it on Google Play Get it on F-Droid

Verification

APK releases on Google Play and GitHub are signed using the same key. They can be verified using apksigner:

apksigner verify --print-certs --verbose aegis.apk

The output should look like:

Verifies
Verified using v1 scheme (JAR signing): true
Verified using v2 scheme (APK Signature Scheme v2): true

The certificate fingerprints should correspond to the ones listed below:

Owner: CN=Beem Development
Issuer: CN=Beem Development
Serial number: 172380c
Valid from: Sat Feb 09 14:05:49 CET 2019 until: Wed Feb 03 14:05:49 CET 2044
Certificate fingerprints:
   MD5:  AA:EE:86:DB:C7:B8:88:9F:1F:C9:D0:7A:EC:37:36:32
   SHA1: 59:FB:63:B7:1F:CE:95:74:6C:EB:1E:1A:CB:2C:2E:45:E5:FF:13:50
   SHA256: C6:DB:80:A8:E1:4E:52:30:C1:DE:84:15:EF:82:0D:13:DC:90:1D:8F:E3:3C:F3:AC:B5:7B:68:62:D8:58:A8:23

Libraries

License

This project is licensed under the GNU General Public License v3.0. See the LICENSE file for details.

Attribution

The icon is largely based on a design by Freepik from Flaticon.