All Projects → tejado → Authorizer

tejado / Authorizer

Authorizer is a Password Manager for Android. It emulates an HID keyboard over USB and enters your credentials on your target device. Additionally it supports OTP 🔑📴

Programming Languages

java
68154 projects - #9 most used programming language

Projects that are alternatives of or similar to Authorizer

Hidapi
A Simple library for communicating with USB and Bluetooth HID devices on Linux, Mac and Windows.
Stars: ✭ 465 (+170.35%)
Mutual labels:  usb, hid, bluetooth
Nitrokey App
Nitrokey's Application (Win, Linux, Mac)
Stars: ✭ 210 (+22.09%)
Mutual labels:  otp, password-manager, password-store
Pwd.sh
GPG symmetric password manager
Stars: ✭ 1,468 (+753.49%)
Mutual labels:  encryption, password-manager, gpg
OormiPass
Free open source cross platform password manager
Stars: ✭ 50 (-70.93%)
Mutual labels:  encryption, password-manager, password-store
Gopass Ui
gopass CLI + UI = visual cross-platform password manager for teams
Stars: ✭ 147 (-14.53%)
Mutual labels:  password-manager, gpg, password-store
Purse
GPG asymmetric (YubiKey) password manager
Stars: ✭ 313 (+81.98%)
Mutual labels:  encryption, password-manager, gpg
gpgpwd
Moved to GitLab
Stars: ✭ 22 (-87.21%)
Mutual labels:  password-manager, gpg, password-store
Buttercup Core
🎩 The mighty NodeJS password vault
Stars: ✭ 340 (+97.67%)
Mutual labels:  encryption, password-manager, password-store
Pass Winmenu
An easy-to-use Windows interface for pass
Stars: ✭ 160 (-6.98%)
Mutual labels:  password-manager, gpg, password-store
Rooster
The simple password manager for geeks, built with Rust.
Stars: ✭ 106 (-38.37%)
Mutual labels:  password-manager, password-store
Dualsense Windows
Windows API for the PS5 DualSense controller
Stars: ✭ 111 (-35.47%)
Mutual labels:  usb, bluetooth
Android Usb Gadget
Convert your Android phone to any USB device you like! USB Gadget Tool allows you to create and activate USB device roles, like a mouse or a keyboard. 🛠🛡📱
Stars: ✭ 118 (-31.4%)
Mutual labels:  usb, hid
Wsend Gpg
Encrypted end to end file transfer
Stars: ✭ 97 (-43.6%)
Mutual labels:  encryption, gpg
Gitpass
Open Source Your Password (Mismanagement)!
Stars: ✭ 113 (-34.3%)
Mutual labels:  encryption, password-manager
Passmgr
a simple, portable password manager
Stars: ✭ 74 (-56.98%)
Mutual labels:  encryption, password-manager
Chest
Bash glue to encrypt and hide files
Stars: ✭ 123 (-28.49%)
Mutual labels:  encryption, password-manager
Knob
Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]
Stars: ✭ 131 (-23.84%)
Mutual labels:  bluetooth, encryption
Bthidhub
Bluetooth HID hub
Stars: ✭ 65 (-62.21%)
Mutual labels:  hid, bluetooth
Zeyple
Postfix filter/hook to automatically encrypt outgoing emails with PGP/GPG
Stars: ✭ 122 (-29.07%)
Mutual labels:  encryption, gpg
Hidguardian
Windows kernel-mode driver for controlling access to various input devices.
Stars: ✭ 138 (-19.77%)
Mutual labels:  usb, hid

Authorizer CI

A Password Manager for Android with Auto-Type over USB and Bluetooth, OTP and much more.

The idea behind Authorizer is, to use old smartphones as a hardware password manager only. To avoid manual typing of long and complex passwords everytime you need them, Authorizer provides Auto-Type features over USB and Bluetooth. It pretends to be a keyboard (e.g. over an USB On-The-Go adapter) and with a button press inside the app, it will automatically type the password for you on your pc, laptop, tablet or other smartphone.

Get it on F-Droid Get it on Google Play

Authorizer is based on PasswdSafe a Password Safe port for Android and FreeOTP.

Features

  • Auto-Type over USB
  • Auto-Type over Bluetooth (experimental)
  • Different keyboard languages (HID Usage Tables)
    • English (US)
    • English (GB)
    • German
    • German (Apple)
    • German (CH)
    • French (CH)
    • Neo 2 (Layer 1,2 and 3)
  • Asymmetric encrypted backup on USB mass storage
  • OTP integration (TOTP/HOTP)
  • Tree list style
  • Icons

Features in Detail

Auto-Type over USB and Bluetooth

Authorizer PoC YouTube video Authorizer is able to pretend to be an HID Keyboard so it can auto-type the credentials over USB and Bluetooth.
There are Auto-Type buttons at the password entry view. If a button is pressed longer, a different keyboard layout can be choosen. Additional, there is a USB Quick Auto-Type button in the TreeView which auto-types the respective password on a long press.
There are different settings per password entry like delimiter and the password return suffix. In the general App preferences a default keyboard layout can be choosen.

Auto-Type over USB requires support of the USB HID device role. This can be enabled with my USB Gadget Tool.

Auto-Type over Bluetooth is currently an experimental feature and only available on Android Pie (9.0) or higher.

Asymmetric encrypted backup on USB mass storage

The concept behind Authorizer is to have an offline device. As a consequence, it can't create password file backups over the network. To create backups in a comfortable way, Authorizer will open a backup dialog if it detects a new connected mass-storage (e.g. an USB stick connected over an USB On-The-Go adapter). By pressing "Backup now" in this dialog, a backup folder can be selected. It must contain a GPG public key with the file name "pubkey.asc". The default password file will be encrypted with this GPG key and stored in the selected folder.
This feature can be enabled over the general App preference "Enable GPG backup on USB storage".

OTP integration

Besides standard username & password entries, Authorizer also supports two-factor authentication (2FA) over one-time passwords (OTP). Time-based (TOTP) and HMAC-based (HOTP) one-time passwords are supported.
The OTP secret can be added to a password entry manually or by scanning a QR code. Afterwards, a press on the empty token field ("------") will generate a new OTP. It is also possible, to auto-type the OTP over USB or Bluetooth by adding {OTP} as a placeholder directly in the username or password, e.g. {OTP} in the password "myPa$sword{OTP}" will be replaced with a newly generated OTP.
Like username, password and other data, the OTP secret is stored in the password file.

Additional Auto-Type placeholders

In addition to the {OTP} placeholder, Authorizer also supports {TAB} and {RET} for the tabulator and return key. Adding these to the username and/or password will result in auto-typing the respective key (tab or return) instead of the placeholder.
Example: if "peter{TAB}{OTP}" is set as the username, "peter" followed by the tabulator key and a newly generated OTP will be auto-typed.

Roadmap

  • NFC support
  • Smartcard emulation (e.g. OpenPGP cards, etc.)
  • CTAP + CTAP2 integration for U2F and WebAuthn
  • Redesign of the App
  • Refactoring the HID Keyboard Layout code

Requirements

  • For Auto-Type over USB: USB Gadget Tool or an Android Kernel compiled with Android Keyboard Gadget is required
  • For Auto-Type over Bluetooth: Android Pie or higher is required. Tested devices:
    • Samsung Galaxy S8: WORKING
    • HTC One M8 (LineageOS 16.0): WORKING

Contributions & Community

Contributions are highly welcome.
For support & development discussions around Authorizer, feel free to contact me.

Proof of Concept

Proof-of-Concept app for Auto-Typing (USB Keyboard emulation): Authorizer-PoC

Note that the project description data, including the texts, logos, images, and/or trademarks, for each open source project belongs to its rightful owner. If you wish to add or remove any projects, please contact us at [email protected].