01

Buttons

ButtonDescription
▲ TopNavigate up / increment digit
▼ BottomNavigate down / next digit
RSTHardware reboot — same as power cycling the device
02

First Boot

Step 1 — Create PIN

On first power-on the device prompts you to create a PIN code. This PIN encrypts the master device key — it is required on every startup.

Step 2 — Connect to WiFi

After PIN creation the device starts an Access Point. Connect to it from your phone or computer. A captive portal opens automatically — select your WiFi network and enter the password. The device reboots after saving.

Note WiFi can also be configured later through the web cabinet in AP mode, before the automatic WiFi setup runs.

Step 3 — Web cabinet starts automatically

On first boot after WiFi setup, the web server starts automatically. Enter the device IP or mDNS address in your browser to complete registration.

03

Operating Modes

After entering the PIN on every boot, you have a few seconds to select a mode by pressing a button. If nothing is pressed, WiFi mode starts automatically.

AP Mode
Press ▲ Top
  • Passwords
  • HOTP codes
  • Web cabinet
  • BLE transfer
  • TOTP codes
Offline Mode
Press ▼ Bottom
  • Passwords
  • HOTP codes
  • BLE transfer
  • TOTP codes
  • Web cabinet
WiFi Mode
No button — auto
  • Passwords
  • HOTP codes
  • TOTP codes
  • Web cabinet (opt.)
  • BLE (no web server)

WiFi Mode — Web Server

After connecting to WiFi and syncing time via NTP, the device asks: enable web server?

StateAvailable
Web server OFFTOTP, HOTP, passwords, BLE transfer
Web server ONTOTP, HOTP, passwords, web cabinet — BLE transfer disabled
05

BLE Password Transfer

BLE transfer works without any app — the device acts as a Bluetooth HID keyboard and types the password directly.

ModeBLE Available
Offline✓ Yes
AP✓ Yes
WiFi — web server OFF✓ Yes
WiFi — web server ON✗ No

First Connection (Bonding)

  1. In the password manager screen, hold both buttons
  2. A PIN code appears on the device display
  3. On your phone, select the device in Bluetooth settings and enter that PIN
  4. Bonding is saved — next time no PIN is needed

Sending a Password

  1. Navigate to the desired password using /
  2. The password is transmitted to the phone as keyboard input
  3. Press ▲ Top to exit BLE and return to passwords
Note If a hardware BLE PIN is configured, the device will ask you to confirm it on-screen before transmitting.
06

Factory Reset

  1. Press RST
  2. Immediately after reboot — hold both buttons simultaneously
Warning Factory reset permanently deletes all TOTP/HOTP keys, passwords, WiFi credentials, sessions, and PIN. Export your data before resetting if you need to restore it.
07

Web Cabinet — Access & Login

How to Open

Open the device IP address in your browser, or use the mDNS address: http://t-disp-totp.local (hostname configurable in Settings).

In AP mode a captive portal opens automatically when you connect to the device's WiFi network.

Registration

On first access the device redirects to the registration page. Create a username and password, then log in with the same credentials.

Known Bug The registration or login page may appear blank on first load. Refresh the page and it will display correctly.
Login Attempts Multiple failed login attempts will lock access until the device is rebooted.
08

Keys — TOTP & HOTP

Adding a Key

Enter a name and the secret key. Default settings: TOTP, SHA1, 6 digits, 30 second interval.

Click Additional Settings to change:

ParameterOptions
TypeTOTP, HOTP
AlgorithmSHA1, SHA256, SHA512
Code length6 or 8 digits
TOTP interval30 or 60 seconds

You can also add a key by uploading a screenshot of its QR code.

Key Actions

ActionResult
Tap the codeCopy code to clipboard
QR buttonDisplay QR code on device screen for 30 seconds — scan to export to another authenticator app
Next (HOTP only)Advance counter and generate next code
DeleteRemove key permanently
Scanning the QR The device screen is small. Enable your phone's flashlight and zoom in for a cleaner scan.

Export & Import

  1. Click Activate Export and enter your web cabinet password
  2. Select the keys to export and click Export — a .enc file downloads
  3. To import: activate export again, click Import, upload the .enc file

The .enc file can also be opened in decrypt_export.html (project root) — an offline editor for viewing, decrypting, and editing keys on your computer.

09

Passwords

Adding a Password

Enter a name and password. Use the generator icon to create one:

ControlFunction
SliderPassword length: 1 – 64 characters
RegenerateGenerate a new random password
SaveCopy generated password into the input field

Click Save Password to add it to the list.

Password Actions

ButtonAction
CopySecurely fetch password from device and copy to clipboard
EditOpen edit form — change name or password and save
RemoveDelete password permanently

Export & Import

Works identically to key export — activate, enter password, download .enc file. Compatible with decrypt_export.html.

10

Display Settings

SettingOptions
ThemeLight, Dark
TimezoneUsed for the clock widget shown on device screen
Splash screenImage shown on boot: SecureGen (original), Blade Runner 2044, Combs
Screen timeoutTime until screen turns off automatically

Each setting has its own Save button.

11

PIN Settings

Device PIN (Startup Encryption)

Controls the PIN requested on every boot. This PIN encrypts the master device key — all stored data depends on it. Enabled by default, created on first boot.

StateEffect
EnabledPIN required on startup. Master key encrypted on disk.
DisabledNo PIN on startup. Master key stored unencrypted — if the device is stolen, data can be extracted.
Important Once disabled, the master key cannot be re-encrypted without a Factory Reset. A reset requires re-importing all keys and passwords from backups.

BLE Bonding PIN

The PIN entered on your phone during first Bluetooth pairing. Generated randomly on first boot. Can be changed and saved here.

BLE Hardware Confirmation PIN

An additional PIN prompted on the device itself before any BLE password transfer. Prevents unauthorized transfers if someone else has access to the device.

12

Settings

Change Web Cabinet Password

Requirements: minimum 8 characters, uppercase letter, lowercase letter, number, special character (!@#$%).

Change AP Password

Password for the device's own WiFi access point.

Bluetooth

BLE device name — maximum 15 characters. This is the name visible when pairing.

mDNS

Hostname for local network access. After saving, the device is reachable at http://<hostname>.local.

Startup Mode

Default screen on boot: TOTP/HOTP view or password manager.

Web Server Auto-Shutdown

Automatically stops the web server after inactivity: 5 min, 10 min, 1 hour, or never.

Auto-Logout Timer

OptionBehaviour
Until rebootSession ends on every device reboot — fresh login required
1 hour / 6 hours / 24 hours / 3 daysSession persists across reboots for the selected duration

Device Controls

ButtonAction
RebootRestart the device
Reboot with web serverRestart and automatically enable the web server on next boot
Clear BLE clientsRemove all saved Bluetooth bondings
LogoutEnd current web cabinet session