Hostspica Passkey

HostSpica Passkey is a local-only WebAuthn/FIDO2 passkey authenticator for Android. It generates and stores your passkeys entirely on this device — no cloud account, no sync service, no telemetry. Your private keys are never seen by us, because there's no server for them to be seen by. WHY IT'S DIFFERENT Every mainstream passkey option routes through a cloud account — Google, Apple, or a third-party vault — even though the whole point of a passkey is that the private key never has to leave your device. HostSpica Passkey actually holds to that: no account to lose access to, no vendor relay in the cross-device sign-in path, nothing to trust but this app and your phone's own hardware. WHAT IT DOES • Register as a system passkey provider, then sign in to any app or website that supports passkeys with just your fingerprint or face • Sign in from a nearby laptop or another device by scanning a QR code — a direct, encrypted Bluetooth connection completes the sign-in, with no cloud relay involved • Manage your passkeys: view, rename, or delete them any time SECURITY, BUILT IN NOT BOLTED ON • Private keys are generated inside Android Keystore (StrongBox-backed where your device supports it) and are non-exportable — not by this app, not by another app, not even by us • Every sign-in requires a fresh biometric check, cryptographically bound to that one signature by the OS and hardware — not just an app-unlock • Real hardware attestation (fmt: "android-key" per the WebAuthn spec) on every passkey you create • Passkeys are phishing-resistant by construction — a passkey made for one site cannot be used to sign in to a different one, even a convincing copy • Zero network permission — the app cannot make a network call even if it wanted to. No analytics, no crash reporting, no ads • Rooted-device detection shown as a clear warning, never a hard block WHO MAKES THIS HostSpica Passkey is built by HostSpica as part of HostSpica Labs, alongside HostSpica Authenticator (TOTP/HOTP 2FA codes) and other independent, free tools. No white-label, no shared infrastructure with any other passkey app. Questions or feedback: [email protected]