Is Auth Token safe?

Turning a mobile phone into a One Time Password (OTP) generation device which can be used in the place of hardware tokens. Support for provisioning tokens using the KeyUriFormat and QR codes as well as manual creation. Can optionally be protected with a PIN to stop unauthorised access to the software tokens. Supports both HOTP (Event Tokens) and TOTP (Time Tokens) specifications.

Developer: Mark McAvoy
Category: Password & 2FA
First release: 15 May 2017
License: Not documented

02 / Package identity

Technical fingerprint

Application IDuk.co.bitethebullet.android.token

Latest APK SHA-256e6944295ef12926a1f683a974cd2d7ef95c3d5e4ef7af86dd2a4eee9029c4fe1

Signing certificate77:0E:AA:D0:FD:27:41:38:2D:10:10:7D:7F:F0:7F:1A:BB:55:3A:E5:90:BC:26:6F:AE:F4:14:49:C5:C7:4F:02

MIN ANDROID21TARGET30ARCHITECTURE

03 / History

Project timeline

15 May 2017

Package observed in source index

Metadata and versions observed from the fdroid repository index.

04 / Version archive

Documented releases

1 TOTAL

VersionReleasedAndroidArchitecture

3.015 May 201721+→

05 / Safety & access

Safety verdict

Authentic — file hash matches the source indexNo ads or tracking flagged by the source

IntegritySHA-256 verified vs source

SourceOpen-source · fdroid

Permissions4 declared · 2 sensitive

Signaturepresent

Anti-featuresNo known anti-features

Sensitive accessREAD_EXTERNAL_STORAGEWRITE_EXTERNAL_STORAGE

Declared permissions

android.permission.READ_EXTERNAL_STORAGE android.permission.USE_BIOMETRIC android.permission.USE_FINGERPRINT android.permission.WRITE_EXTERNAL_STORAGE

Tracker status: Not assessed by WIKI for Android.

06 / Sources

Evidence ledger

Each entry is a captured public reference backing this record.

RepositorySource package page↗Source codeSource repository↗