ESP32 & ESP32-S3 · OPEN SOURCE · MIT LICENSE

Your secrets stay on the device

TOTP authenticator and password manager for ESP32. No cloud. No subscriptions. AES-256 encrypted. Fully open source.

MIT License ESP32 & S3 PlatformIO No Cloud AES-256
🔐

TOTP & HOTP

RFC 6238 and RFC 4226. Compatible with Google Authenticator, Authy, and all standard apps.

🔑

Password Manager

Encrypted offline vault. BLE HID keyboard types passwords directly. S3 adds USB HID support — no clipboard, no app needed.

🌐

Web Interface

Runs on the device. Full management from any browser, no cloud, no account.

🛡️

AES-256 Encrypted

Per-device key derived from your PIN via PBKDF2-HMAC-SHA256. Nothing stored in plaintext.

8-Layer Web Security

ECDH key exchange, AES-GCM session encryption, URL obfuscation, traffic masking.

📡

Works Offline

Passwords and HOTP codes work in all modes. TOTP works offline with an optional DS3231 RTC module — no internet needed.

T-Display ESP32

T-Display ESP32 (Classic)

  • Display: 1.14" SPI (135×240)
  • MCU: ESP32 (Dual-core 240MHz)
  • PSRAM: ❌ No
  • BLE HID: ✅ Native support
  • USB HID: ❌ Not supported
  • RTC Module: ✅ DS3231 supported
  • Security: AES-256 encryption

Compact, affordable, perfect for basic TOTP and password management.

T-Display-S3

T-Display-S3

  • Display: 1.9" Parallel (170×320)
  • MCU: ESP32-S3 (Dual-core 240MHz)
  • PSRAM: ✅ 8MB
  • BLE HID: ✅ Native support
  • USB HID: ✅ Native support
  • RTC Module: ✅ DS3231 supported
  • Security: AES-256 (better performance)

Larger display, USB HID support, more memory — recommended for advanced features.

$ git clone https://github.com/makepkg/SecureGen.git
$ cd SecureGen

# Open in VS Code with PlatformIO extension
# Build & Upload to your ESP32