Lume Auth

LUME is an all-in-one security application, offering TOTP/MFA authenticator, password management, and end-to-end encrypted messaging features — only your face decrypts and reveals sensitive data.
No biometrics stored
No master password.
No PIN.

--- MFA Authenticator ---
TOTP tokens (RFC 6238) managed alongside stored credentials — no separate authenticator app required. Codes are generated locally with no cloud dependency.

--- Password Manager ---
AES-256 encrypted credential storage with support for username, URL, password, and notes per entry. A built-in cryptographically secure password generator produces high-entropy credentials on demand.

--- End-to-End Encrypted Chat ---
All messages are end-to-end encrypted in transit and at rest. A tap-to-reveal mode blurs incoming messages until explicitly unlocked, preventing passive exposure. Face authentication is required to enter any chat session.

-- Key Specifications --
- Credential encryption: AES-256
- MFA standard: TOTP (RFC 6238)
- Key derivation: SensePrint — face-derived, runtime-only, never stored
- Post-quantum resistant encryption (NIST PQC standards)
- Biometric data: never stored, never transmitted
- Messaging: End-to-end encrypted
- Architecture: Local-first; vault and MFA function fully offline