TAuth

The Challenge

Most desktop authenticators either sync to a cloud account or keep secrets readable on disk. A vault copied from a backup or synced folder should be useless without the password, and a tampered file should be detected rather than decrypted.

The Solution

Built a Kotlin desktop app that encrypts the entire vault under a master password with authenticated encryption, and zeroes the key in memory whenever the window hides to the tray. Lock policies live inside the encrypted vault, so editing a config file cannot switch them off. Native installers ship for each OS.

Highlights

• Keyboard-only flow with search, copy, and timed clipboard clearing
• Add accounts from otpauth URIs or QR codes read from image files
• No account, no sync, and no network client