VaultApprover

Now with biometric lock screen and privacy screen protection — your vault approvals stay private even on shared devices.

VaultApprover is a minimalist companion app for self-hosted Vaultwarden/Bitwarden servers. It handles one thing: approving "Login with device" requests quickly and securely.

KEY FEATURES:

• Biometric unlock — Face ID / Touch ID on every launch • Real-time notifications — instant push via WebSocket (SignalR) • Fingerprint phrase — 5-word verification phrase to prevent spoofing • Approve or Deny — one tap to respond to login requests • Request history — audit trail with timestamps and response times • Two-factor authentication — TOTP support during setup • Dark mode — follows system or manual selection • Multilingual App Store listing — English, Russian, Arabic, Chinese

HOW IT WORKS:

1. Enter your Vaultwarden server URL and email
2. Authenticate with your master password (entered once, never stored)
3. Enable biometric unlock
4. When someone logs in with "Login with device", you get a notification
5. Verify the fingerprint phrase, tap Approve — done

SECURITY:

• Master password is never stored on device • End-to-end encryption: RSA-2048-OAEP key exchange • User key protected by device Keychain with biometric lock • All cryptography runs locally — server never sees your keys • Supports Argon2id and PBKDF2 key derivation

This app does NOT access your vault. It only approves login requests.

Requires a self-hosted Vaultwarden server with "Login with device" enabled.