Foil Auth
Secure OTP (One-Time Password) generator for Sailfish OS.
Its functionality is similar to SailOTP except that Foil Auth keeps secret authentication keys encrypted with your Foil password. Supports both time-based (TOTP) and counter-based (HOTP) passwords. Tokens can be shared and imported via QR codes.
Foil password (and the RSA encryption key ~/.local/share/foil/foil.key) is shared with Foil Pics and Foil Notes. Encrypted authentication keys for OTP generation are stored in ~/Documents/FoilAuth.
The format of the encrypted file is described here.
Note that you can add your encrypted files and the Foil key to the backup with the help of My Backup app.
Source code: https://github.com/monich/harbour-foilauth
Screenshots:
Category:
Keywords:
Application versions:
Changelog:
- 1.1.5 (Jan 15 2023)
- Support for token groups
- New UI for reordering tokens
- Updated Polish translation (Atlochowski) - 1.1.4 (Sep 26 2022)
- Fixed a problem with import via QR code - 1.1.3 (Aug 17 2022)
- Implemented import of multiple tokens
- Freshened up the UI
- Removed MD5 support - 1.1.2 (Jul 25 2022)
- Tweaked token creation workflow
- Switched QR-code decoding from zxing to zbar
- Properly support non-ASCII labels - 1.1.1 (Jun 13 2022)
- Allow to turn autolock off - 1.1.0 (Mar 20 2022)
- Opt out of sandboxing (no more Jolla Store updates!)
- Improved QR code scanning performance
- Minor UI tweaks
- Added Chum metadata - 1.0.21 (Nov 15 2021)
- Load libcrypto.so dynamically - 1.0.20 (Nov 5 2021)
- Link OpenSSL 1.0 statically for compatibility with Sailfish OS 4.3
- Updated Polish translation (Atlochowski)
- Tweaked selection page - 1.0.19 (Oct 10 2021)
- Support for HOTP (counter-based) passwords
- Copy password to clipboard on tap - 1.0.18 (Jul 30 2021)
- Allow to choose HMAC digest algorithm
- Generate QR codes with lower error correction level
- Reworked QR code scan UI transitions
- Don't ignore issuer of scanned tokens
- Export or delete multiple tokens at once - 1.0.17 (Apr 18 2021)
- Support for reading otpauth-migration QR-codes - 1.0.16 (Feb 23 2021)
- Hungarian translation (@1Zgp) - 1.0.15 (Jan 9 2021)
- Tweaked remorse items a bit
- Integration with My Backup - 1.0.14 (Dec 20 2020)
- Fixed flashlight - 1.0.13 (Dec 11 2020)
- Fixed QR code scanning on Sailfish OS 4.0
- Updated libqrencode to v4.1.1 - 1.0.12 (Nov 30 2020)
- Added "Show QR code" context menu item
- Display QR code full screen when it's tapped - 1.0.11 (Nov 16 2020)
- Updated Polish translation (Atlochowski) - 1.0.10 (Nov 15 2020)
- Adapted to recent changes in Sailfish OS
- Polished landscape layouts - 1.0.9 (Oct 12 2020)
- Fixed a problem with initial update of current passwords
- More dialog titles - 1.0.8 (Oct 7 2020)
- Added German translation (Samuel Kron)
- Use stronger SHA256 digest for signature
- Tweaked password change UI - 1.0.7 (Jan 3 2020)
- Support for scanning inverted QR codes
- Autolock is delayed by 15 seconds
- Miscellaneous UI tweaks - 1.0.6 (Nov 12 2019)
- Freshened up the UI - 1.0.5 (Apr 22 2019)
- Query the actual maximum zoom from the camera
- Improved French (Quentí) and Polish (Atlochowski) translations - 1.0.4 (Apr 12 2019)
- French translation (Quentí) - 1.0.3 (Apr 11 2019)
- Swedish translation (Åke Engelbrektson) - 1.0.2 (Apr 11 2019)
- Chinese translation (@dashinfantry) - 1.0.1 (Apr 10 2019)
- Polish translation (Atlochowski) - 1.0.0 (Apr 10 2019)
- Initial version
Comments
slava
Tue, 2019/08/06 - 20:39
Permalink
I'm afraid you've lost your auth token forever and need to request a new one :/ Once the old encryption key is gone, there's no way to recover encrypted data. At least there sholdn't be by design, unless the design is flawed (I hope not).
TheJullus
Thu, 2019/08/08 - 18:53
Permalink
I do have the auth token because I did a backup of my nemo folder. I just switched foil.key in .../nemo/.local/share/foil and it works just fine!!
slava
Thu, 2019/08/08 - 19:48
Permalink
Good! Just don't lose your key and don't forget your password :)
glanternier
Mon, 2019/07/08 - 16:42
Permalink
Ok. I now understand how it works. I had to use inWebo anyway because the helpdesk was being stupid and rigid about this, but I understand what I have to do next time if I want to use the native app. Thanks !!!
glanternier
Sat, 2019/07/06 - 12:32
Permalink
Hello, I want to use Foil OTP to register my O365 account at work, but the IT helpdesk insists on going with an Android app called inWebo. I think that I could use Foil OTP instead, but I don't understand how OTP works technically so I am not sure. The helpdesk will not help me of course. Seeing an non Android / iOS device almost caused them a panic attack :-(
slava
Mon, 2019/07/08 - 17:59
Permalink
If you enter your foil password, select "Add Token" from the pulley menu and press "Scan QR code" button (they provided you the QR code, didn't they?), you should be able to import the token and use Foil Auth for authentication.
These "one time passwords" are essentially one long password (the
secret=part ofotpauth://URL), out of which a shorter one is generated based on the current time. The algorithm implemented by Foil Auth is described heredirec85
Fri, 2019/05/24 - 23:27
Permalink
Works well, great app!
explit
Thu, 2019/04/11 - 00:45
Permalink
Absolut great like all your apps, Slava!
minitreintje
Wed, 2019/04/10 - 15:51
Permalink
The Foil apps are simple, polished and work really well! Thanks Slava!
Historyscholar
Wed, 2019/04/10 - 15:49
Permalink
Nice
Pages