Lume Auth

LUME is an all-in-one security application, offering TOTP/MFA authenticator, password management, and end-to-end encrypted messaging features — only your face decrypts and reveals sensitive data.

No biometrics stored

No master password.

No PIN.

--- MFA Authenticator ---

TOTP tokens (RFC 6238) managed alongside stored credentials — no separate authenticator app required. Codes are generated locally with no cloud dependency.

--- Password Manager ---

AES-256 encrypted credential storage with support for username, URL, password, and notes per entry. A built-in cryptographically secure password generator produces high-entropy credentials on demand.

--- End-to-End Encrypted Chat ---

All messages are end-to-end encrypted in transit and at rest. A tap-to-reveal mode blurs incoming messages until explicitly unlocked, preventing passive exposure. Face authentication is required to enter any chat session.

-- Key Specifications --

- Credential encryption: AES-256

- MFA standard: TOTP (RFC 6238)

- Key derivation: SensePrint — face-derived, runtime-only, never stored

- Post-quantum resistant encryption (NIST PQC standards)

- Biometric data: never stored, never transmitted

- Messaging: End-to-end encrypted

- Architecture: Local-first; vault and MFA function fully offline