LUME Auth

LUME is an all-in-one security application, offering TOTP/MFA authenticator, password management, and end-to-end encrypted messaging features — only your face decrypts and reveals sensitive data. No biometrics stored No master password. No PIN. --- MFA Authenticator --- TOTP tokens (RFC 6238) managed alongside stored credentials — no separate authenticator app required. Codes are generated locally with no cloud dependency. --- Password Manager --- AES-256 encrypted credential storage with support for username, URL, password, and notes per entry. A built-in cryptographically secure password generator produces high-entropy credentials on demand. --- End-to-End Encrypted Chat --- All messages are end-to-end encrypted in transit and at rest. A tap-to-reveal mode blurs incoming messages until explicitly unlocked, preventing passive exposure. Face authentication is required to enter any chat session. -- Key Specifications -- - Credential encryption: AES-256 - MFA standard: TOTP (RFC 6238) - Key derivation: SensePrint — face-derived, runtime-only, never stored - Post-quantum resistant encryption (NIST PQC standards) - Biometric data: never stored, never transmitted - Messaging: End-to-end encrypted - Architecture: Local-first; vault and MFA function fully offline