RotarySafe TOTP Authenticator

Jikisa i-bezel noma umqhele wewashi lakho ukuze uvule amakhodi akho e-2FA. Yilokho kuphela.

I-RotarySafe iyimenenja yokuqinisekisa enezici ezimbili ye-Android kanye ne-Wear OS egcina yonke imfihlo kumadivayisi akho futhi ivula amakhodi e-TOTP ngenhlanganisela ebonakalayo yokujikeleza - akukho seva, akukho ukuvumelanisa kwamafu, akukho ikhophi yezimfihlo zakho ezihleli endaweni ongayikhethanga.

INDLELA ESEBENZA NGAYO

Setha inhlanganisela yokujikeleza kumqhele wakho wewashi we-Wear OS - njengenhlanganisela encane ephephile esihlakaleni sakho. Ungashintsha phakathi kombono we-bezel noma umqhele ukuze wenze ngezifiso njengoba kudingeka. Uma udinga ikhodi ye-2FA, faka inhlanganisela yakho ngokuphendula i-bezel noma umqhele. I-RotarySafe iyayiqinisekisa futhi ibonise ikhodi ye-TOTP ebukhoma ngqo ebusweni bewashi lakho. Akukho okushiya amadivayisi akho.

UKWAKHIWA KWEZOKUPHEPHA

Akukho ukufinyelela kwe-inthanethi. I-RotarySafe ayinayo imvume ye-INTERNET futhi ayiceli zicelo zenethiwekhi. Ukwephulwa kweseva akukwazi ukudalula izimfihlo zakho, ngoba ayikho iseva. Ukubuyisela noma ukudlulisa uhlelo lokusebenza kuzoletha isisekelo sedatha esingenalutho, imisebenzi yokuthekelisa nokungenisa enezikhumbuzi ezitholakalayo.

Zonke izimfihlo ze-TOTP zigcinwa ku-Android EncryptedSharedPreferences, zisekelwa yi-Android Keystore kanye ne-hardware-bound lapho idivayisi yakho iyisekela khona.

Inhlanganisela yakho ejikelezayo igcinwa kuphela njenge-PBKDF2-HMAC-SHA256 hash (ukuphindaphinda okungu-100,000, usawoti ongahleliwe ongu-16-byte ngokusetha ngakunye). Inhlanganisela eluhlaza ayigcinwa noma ilogwe.

Yonke imiyalezo yocingo yokubuka ibethelwa nge-AES-256-GCM kusetshenziswa i-IV entsha engahleliwe. Ukhiye weseshini usungulwa nge-ECDH yesikhashana (NIST P-256) kukho konke ukubhanqa - akukho mfihlo yesikhathi eside eyabiwe yokwebiwa.

Ngemuva kwemizamo emithathu yokuhlanganisa ehlulekile, uhlelo lokusebenza luvala kanzima futhi ludinga ukuqinisekiswa kwe-biometric efonini ukuze lusule - ngisho nasekuqaliseni kabusha nasekuqaliseni kabusha kwedivayisi.

Ama-backup abethelwe asebenzisa i-Argon2id ukuthola ukhiye.

Gcina i-backup yakho endaweni ephephile, njengesitoreji sakho samafu esiyimfihlo. Uzoyidinga ukuze ubuyisele ama-akhawunti akho kudivayisi entsha.

Akukho ngxenye eseceleni kweseva kusho ukuthi akukho vektha yokuhlasela kwe-supply-chain ngokumelene nezimfihlo zakho. Inhlanganisela ebonakalayo ingeza isici sokuqinisekisa esizimele ku-biometrics yakho kanye nokukhiya isikrini sefoni yakho.

Umcimbi ngamunye wokubhangqa ukhiqiza ukhiye weseshini omusha nge-ECDH yesikhashana - ayikho ukhiye wempande wesikhathi eside ohlanganisa ukubhangqa. Ukwehlisa ukhiye weseshini ogciniwe kunikeza ukufinyelela kuthrafikhi yalowo mbhangqa, kodwa ukubhangqa kabusha kwesikhathi esizayo kukhiqiza izinto zokhiye ezizimele ngokuphelele.

Ukuhoxiswa kuyaqinisekiswa: ukuphoqa iwashi ukuthi libuyele esimweni esingabhangqiwe kudinga ubufakazi bokhiye weseshini wamanje.

KUDINGEKA I-WEAR OS

I-RotarySafe idinga iwashi le-Wear OS elibhangqiwe. Iwashi linikeza isikhombikubona sokuhlanganiswa esijikelezayo futhi libonisa amakhodi e-TOTP ngqo esihlakaleni.

UKUFANELELANA

Isekela wonke ama-akhawunti ajwayelekile e-TOTP (RFC 6238): i-Google, i-GitHub, i-AWS, i-Microsoft, nanoma iyiphi insizakalo enikeza ikhodi ye-QR yomqinisekisi ojwayelekile. Ngenisa ngokuskena ikhodi ye-QR yomkhiphi ngohlelo lokusebenza lwefoni.

ISIGABA SAMAHHALA: Ama-akhawunti ama-2 e-TOTP asebenza ngokugcwele

I-PREMIUM: Vula ama-akhawunti angenamkhawulo ukuze uthole inkokhelo yesikhathi esisodwa

I-RotarySafe imahhala ngokuphelele ukuyisebenzisa nama-akhawunti afinyelela kwangu-2.

Azikho izikhangiso, akukho ukulandelela, akukho ukuvumelanisa kwamafu. Konke ukubethela kwenzeka endaweni yakho kudivayisi yakho naku-watch.

I-Premium ayikhethwa futhi inikeza isitoreji se-akhawunti esingenamkhawulo
uma udinga ama-akhawunti angaphezu kwangu-2.