ESP32 · OPEN SOURCE · MIT LICENSE

Your secrets stay on the device

TOTP authenticator and password manager for ESP32. No cloud. No subscriptions. AES-256 encrypted. Fully open source.

MIT License ESP32 PlatformIO No Cloud AES-256
🔐

TOTP & HOTP

RFC 6238 and RFC 4226. Compatible with Google Authenticator, Authy, and all standard apps.

🔑

Password Manager

Encrypted offline vault. BLE HID keyboard types passwords directly — no clipboard, no app needed.

🌐

Web Interface

Runs on the device. Full management from any browser, no cloud, no account.

🛡️

AES-256 Encrypted

Per-device key derived from your PIN via PBKDF2-HMAC-SHA256. Nothing stored in plaintext.

8-Layer Web Security

ECDH key exchange, AES-GCM session encryption, URL obfuscation, traffic masking.

📡

Works Offline

TOTP codes require internet (NTP sync). Passwords and HOTP codes work in AP and offline modes — no internet needed.

$ git clone https://github.com/makepkg/SecureGen.git
$ cd SecureGen

# Open in VS Code with PlatformIO extension
# Build & Upload to your ESP32