shadowauth

shadowauth is a personal, local-first encrypted secrets vault designed for modern Android devices. It allows you to store sensitive information—such as API keys, tokens, and SSH keys—encrypted at rest with your own GPG key, ensuring that your data remains private and portable. Key Features: 1. Proximity Authentication via Local REST API shadowauth features an embedded, lightweight HTTP server that runs as a foreground service. This enables nearby machines on your local network to pull decrypted credentials on demand via a simple REST API. By using your physical proximity as a layer of authentication, your scripts and tools can access secrets without ever storing them on the host machine's disk. When you leave the network, your secrets go with you. 2. Secure Backup & Sync via GitHub Maintain cross-device availability and data redundancy with built-in support for GitHub sync. Your encrypted vault can be backed up to a private repository, ensuring you never lose access to your keys while keeping them protected by OpenPGP encryption even while in transit or stored in the cloud. 3. GPG-Based Encryption Unlike standard vaults, shadowauth uses OpenPGP (GPG) for encryption. This means your data is stored in a highly compatible and portable format. You can export your encrypted blobs and decrypt them on any machine using standard GPG tools, avoiding vendor lock-in. 4. Tactile Neumorphic Interface Designed for the Samsung Galaxy S24 Ultra's AMOLED display, shadowauth features a gorgeous dark neumorphic UI. Enjoy a tactile, visually quiet interface with soft surfaces and interaction-driven animations that provide physical feedback for every touch. 5. Local-First & Privacy-Focused shadowauth is 100% local. There are no accounts to create, no cloud telemetry, and no third-party servers tracking your usage. Your keys, your device, your network.