Algonet Pass

Algonet Pass signs you in to your organisation's Algonet business systems with your phone. There is no password to type and no code to copy: you scan the code shown on the login page, confirm with your phone's biometric, and the browser is signed in a moment later. HOW IT WORKS 1. Open the sign-in page of your Algonet system on any computer. 2. Scan the code on the screen with your phone's camera, or tap the sign-in link if you are browsing on the phone itself. 3. Confirm with your fingerprint, face unlock or screen lock. 4. The browser signs you in. Nothing to type, nothing to copy. The first time you use a system, the app registers this phone with it, and the registration is completed by signing in on the web once. After that, every sign-in is a scan and a glance. NOTHING IS TYPED ON THE COMPUTER Your credentials never touch the keyboard, so they cannot be read over your shoulder, left behind in a browser, or picked up by a keylogger on a machine you do not control. A shared desk, a kiosk or a counter PC becomes as safe to sign in from as your own laptop. There is not even a username field to fill in. ONE PHONE, EVERY SYSTEM Register the same phone with as many Algonet systems as you use. Each one stays separate, with its own registration and its own account, and each is listed in the app under the name of the system it belongs to. WHAT YOU NEED Algonet Pass is a workplace tool, not a standalone service. It has no accounts of its own and there is nothing to sign up for. To use it you need an account in an Algonet business system that supports Algonet Pass, provided by your employer or client. PRIVACY The app sends nothing to Algonet. It talks only to your own organisation's server, the same server that showed you the login page. It contains no advertising, no analytics and no tracking of any kind, and it asks for no access to your contacts, photos, files, calendar or location. It does not even ask for the camera: your phone's own camera opens the code and hands the link to the app. SECURITY The private key that identifies your phone is generated on the device, held in encrypted storage under an Android Keystore key, and never transmitted. Every approval requires your fingerprint, face unlock or screen lock. All traffic uses HTTPS, every response from the server is digitally signed, and the app pins the server's key when the phone is registered, so a different key is refused afterwards. Your fingerprint or face is checked by Android itself. The app never sees it: it only receives a yes or no. MANAGING YOUR PHONE Manage registrations lists every system this phone is registered with. Removing one deletes the key from the phone and tells the server to revoke the device, so a phone you are giving up leaves nothing behind. PERMISSIONS Internet access, to reach your organisation's server, and biometric confirmation. Nothing else. LANGUAGES English, Hungarian, German, French, Spanish and Italian.