ADtoolkit

Reset passwords and unlock locked Active Directory accounts from your phone. Built for IT helpdesks. Self-hosted, open source, Face ID protected.

AD Toolkit is a fast, secure helpdesk companion for Active Directory administrators. Reset passwords, unlock locked accounts, and look up user details from your iPhone — without firing up Remote Desktop or finding a Windows machine.

Built for IT teams who need to handle off-hours password calls, traveling admins, and on-call rotations.

KEY FEATURES • User search by username, employee ID, or full name • Account unlock with one tap • Password reset — generate a strong random password or set a custom one • Multiple server profiles for staging, production, or multiple customer tenants • Per-profile credentials, switch instantly from Settings • Face ID / Touch ID / device passcode protection on every launch • Re-locks on backgrounding so a peeked phone shows nothing

SECURITY • HTTPS-only — plain HTTP is rejected at validation time • Bearer tokens stored in iOS Keychain with WhenUnlockedThisDeviceOnly accessibility — never copied to iCloud or device backups • Session token is invalidated immediately on logout • Privileged accounts (Domain Admins) automatically have destructive actions disabled

REQUIREMENTS This app talks to the open-source AD Toolkit PHP backend running inside your network. You will need: • An AD Toolkit server installed on a Windows host that can reach your domain controllers • An HTTPS endpoint (any valid TLS certificate) • An AD account with delegated permissions for password reset and unlock

The backend is a separate open-source project — see the GitHub link in Settings.

OPEN SOURCE Both the iOS app and the server are MIT-licensed. Audit the code, host it yourself, or fork it for your environment. Links in Settings.

WHO IT'S FOR • Helpdesk technicians who get password reset calls all day • Sysadmins on call after hours • Managed service providers supporting multiple tenants • Schools, hospitals, and small IT teams running on-prem AD

WHAT IT'S NOT • Not a cloud service — your data never touches our servers • Not a SaaS product — there's no subscription, no telemetry, no analytics • Not a replacement for Group Policy or full AD management tools