TOTP & HOTP codes
Standards-based 6-digit codes (RFC 4226 / 6238), generated entirely offline — no network round-trip, ever.
Codename: Syrinx
One vault.
One vault.
Every code.
Zero cloud trust.
Xirag Authenticator generates TOTP & HOTP codes and push-approvals entirely offline, from a single security-critical core shared and audited once across every platform you use.
RFC 4226 / 6238
·
Argon2id + ChaCha20-Poly1305
·
Shamir recovery
·
FIDO2 / WebAuthn
Xirag Authenticator
github.com/spxandroid
482 913
xirag.com/admin
--- ---
Sign-in requested
Chrome · Mumbai, IN
Built to be verified, not just trusted
Every feature below runs on the same audited Rust core — Android, Apple, Windows, Linux, and Chrome all share one implementation of the cryptography that protects you.
Push-approval
Approve sign-ins with a tap. No codes to type, and nothing for a phishing page to intercept.
Argon2id-sealed vault
Every secret is encrypted at rest with Argon2id key derivation and ChaCha20-Poly1305 — memory-hard by design.
Shamir recovery
Split your recovery key across trusted people or devices. No single backup, and no single point of failure.
FIDO2 / WebAuthn keys
Hardware security keys for phishing-resistant sign-in — PRF-verified, and tested on real devices, not just emulators.
Biometric quick-unlock
Face ID, Touch ID, Windows Hello, or Android Keystore/StrongBox — your vault unlocks the instant you do.
One audited core
A single Rust core powers every platform. Security-critical logic is written once, reviewed once, trusted everywhere.
Zero-knowledge sync
Optional cross-device sync built so the backend never sees an unencrypted secret — not even in memory.
Three steps. Every account.
1
Add an account
Scan a QR code or paste an otpauth:// link — or enter the secret manually.
2
Generate or approve
Read the rotating code, or tap Approve on a push request. Either way, nothing leaves your device.
3
Sign in, done
The vault stays local and encrypted. Sync is optional — and always zero-knowledge.
One core. Every platform.
Syrinx's cryptography — TOTP/HOTP, vault encryption, Shamir recovery, WebAuthn, sync — lives in a single Rust core, bound natively into each app.
Syrinx
CoreRust
CoreRust
Chrome extensionWASM
AndroidJetpack Compose · JNI
Windows & LinuxTauri v2
AppleSwiftUI · UniFFI
Available everywhere you sign in
Pick your platform — installation takes under a minute.