Hostspica Identity

HostSpica Identity puts the things that prove who you are in one app, and keeps every one of them on your phone. No account to create, no cloud sync, no analytics — there is no server for your data to be on. FOUR TOOLS, ONE PLACE • Authenticator — TOTP and HOTP two-factor codes. Add accounts by QR code or by hand, import from Google Authenticator, search, favorite and group them. • Passkey — register as your phone's passkey provider and sign in to apps and websites with your fingerprint or face. Sign in from a nearby computer by scanning a QR code over a direct Bluetooth link. • AirAuth — approve a sign-in on another screen by scanning its QR code and confirming with your fingerprint or face. A short history shows what you approved or denied. • Vault — passwords and secure notes, encrypted with a key that lives in your phone's secure hardware. Built-in password generator, search, favorites, and autofill into other apps and browsers behind a biometric check. SEE EACH ACCOUNT ONCE The Identity tab groups a service's 2FA code, passkey and saved password together — your GitHub, your Google, your bank — and lets you search across all of them at once. BUILT TO KEEP SECRETS • Secrets are encrypted with non-exportable Android Keystore keys (StrongBox-backed where your device supports it) • Passkey private keys are generated in hardware and can never leave the phone • The app asks for fingerprint, face or your screen lock every time you open it, with a choice of how long it may stay in the background • Zero network permission: the app cannot send anything anywhere • Screenshots and screen recording of the app are blocked • Vault clipboard copies are marked sensitive and cleared after 30 seconds • One password-protected backup file for your Authenticator accounts and Vault MOVING FROM THE STANDALONE APPS Restore your HostSpica Authenticator backup in Settings. Passkeys can't be moved between apps by design — create new ones here. Questions or feedback: [email protected]