Attomus Signet

Attomus Signet is an offline authenticator for security-conscious teams and professionals.

Most authenticator apps ask you to add a third party to your trust chain. Signet does not.

No account required.
Use Signet from first launch with no registration, no email address, and no cloud setup.

No network required.
TOTP and HOTP codes are generated entirely on-device. Signet makes zero network requests.

No telemetry.
No analytics SDKs. No advertising SDKs. No Firebase. No cloud sync. No server-side account.

Hardware-backed secret protection.
OTP secrets are encrypted using Android Keystore keys backed by StrongBox or Trusted Execution Environment hardware where available. Signet shows the protection level for each account.

Biometric-gated access.
Secrets are only accessible after biometric or device credential authentication. If device biometrics change, Signet treats that as a security boundary change and requires affected accounts to be re-provisioned.

Encrypted local backups.
Export your accounts as an Argon2id + AES-256-GCM encrypted backup file. You choose the passphrase. You choose where the file is saved. Attomus cannot recover it.

Standards-based OTP.
Signet supports TOTP and HOTP using the standard otpauth:// format, compatible with GitHub, AWS, Cloudflare, Microsoft, Google, and other services that support standard authenticator apps.

Google Authenticator migration.
Import accounts from Google Authenticator migration QR codes without cloud sync or account linking.

Built for users who want clear security boundaries:
• Secrets stay on device
• Codes are generated locally
• Backups are encrypted locally
• No account registration
• No data collection
• No server-side sync
• No analytics or advertising

Attomus Signet is designed around one principle: your authentication secrets should remain under your control.