Algonet Pass

Algonet Pass signs you in to your organisation's Algonet business systems
with your phone. There is no password to type and no code to copy: you scan
the code shown on the login page, confirm with your phone's biometric, and
the browser is signed in a moment later.

HOW IT WORKS

1. Open the sign-in page of your Algonet system on any computer.
2. Scan the code on the screen with your phone's camera, or tap the sign-in
link if you are browsing on the phone itself.
3. Confirm with your fingerprint, face unlock or screen lock.
4. The browser signs you in. Nothing to type, nothing to copy.

The first time you use a system, the app registers this phone with it, and
the registration is completed by signing in on the web once. After that,
every sign-in is a scan and a glance.

NOTHING IS TYPED ON THE COMPUTER

Your credentials never touch the keyboard, so they cannot be read over your
shoulder, left behind in a browser, or picked up by a keylogger on a machine
you do not control. A shared desk, a kiosk or a counter PC becomes as safe to
sign in from as your own laptop. There is not even a username field to fill
in.

ONE PHONE, EVERY SYSTEM

Register the same phone with as many Algonet systems as you use. Each one
stays separate, with its own registration and its own account, and each is
listed in the app under the name of the system it belongs to.

WHAT YOU NEED

Algonet Pass is a workplace tool, not a standalone service. It has no
accounts of its own and there is nothing to sign up for. To use it you need
an account in an Algonet business system that supports Algonet Pass,
provided by your employer or client.

PRIVACY

The app sends nothing to Algonet. It talks only to your own organisation's
server, the same server that showed you the login page. It contains no
advertising, no analytics and no tracking of any kind, and it asks for no
access to your contacts, photos, files, calendar or location. It does not
even ask for the camera: your phone's own camera opens the code and hands
the link to the app.

SECURITY

The private key that identifies your phone is generated on the device, held
in encrypted storage under an Android Keystore key, and never transmitted.
Every approval requires your fingerprint, face unlock or screen lock. All
traffic uses HTTPS, every response from the server is digitally signed, and
the app pins the server's key when the phone is registered, so a different
key is refused afterwards.

Your fingerprint or face is checked by Android itself. The app never sees
it: it only receives a yes or no.

MANAGING YOUR PHONE

Manage registrations lists every system this phone is registered with.
Removing one deletes the key from the phone and tells the server to revoke
the device, so a phone you are giving up leaves nothing behind.

PERMISSIONS

Internet access, to reach your organisation's server, and biometric
confirmation. Nothing else.

LANGUAGES

English, Hungarian, German, French, Spanish and Italian.