{
  "format": "sanctum-registry-app/1",
  "app_id": "sh.enigma.otp-vault",
  "description": "A two-factor code generator (TOTP, RFC 6238) in a single file. Keys live in an encrypted vault inside the tool's own storage, protected by a username and password. With a YubiKey and smart card access approved for the OATH applet, keys can instead be written to the key, which computes each code and never gives the secret back. The tool asks for storage and, only if you use it, the OATH smart card applet. It asks for no network access.",
  "source": "https://github.com/Enigma-Technologies-Solutions/sanctum/tree/main/examples/otp-vault",
  "license": "AGPL-3.0-only",
  "changelog": [
    {
      "version": "1.0.2",
      "date": "2026-10-02",
      "changes": [
        {
          "type": "added",
          "text": "Time-based codes for SHA-1, SHA-256 and SHA-512 keys, checked against the RFC 6238 test vectors."
        },
        {
          "type": "added",
          "text": "An encrypted software vault, unlocked with a username and password and shown with an eight-emoji fingerprint so you can recognise a correct login before anything is decrypted."
        },
        {
          "type": "added",
          "text": "Optional YubiKey mode that keeps keys on the OATH applet of the key."
        },
        {
          "type": "added",
          "text": "Backup and restore through the clipboard."
        },
        {
          "type": "added",
          "text": "First release signed by Enigma Technologies Solutions."
        }
      ]
    }
  ],
  "manual": {
    "path": "apps/sh.enigma.otp-vault/manual.md",
    "sha256": "sha256:9f9adb9d1e657d50880fe778209a305a306973dd35496c16876ddb82239d4bff",
    "size": 2077
  },
  "screenshots": [
    {
      "path": "apps/sh.enigma.otp-vault/overview.png",
      "sha256": "sha256:10f28ea2ea9a2e3a2d6450e0ded1942159303349ee388a40b0f8c10445cd8713",
      "size": 309015,
      "width": 1600,
      "height": 1131,
      "alt": "Overview of OTP Vault: one-time codes generated inside Sanctum."
    },
    {
      "path": "apps/sh.enigma.otp-vault/create-vault.png",
      "sha256": "sha256:4d27ecc5fde2372124abecc45c77c9401218bbde2fbfc525a7f4d3fb7cfa11c1",
      "size": 411672,
      "width": 1600,
      "height": 1131,
      "alt": "Create a vault: username, password and the eight-emoji fingerprint."
    },
    {
      "path": "apps/sh.enigma.otp-vault/codes.png",
      "sha256": "sha256:7e64eb11cec93d737e51bca2db85f07168d83c8078ac63ca50b3de432e654436",
      "size": 283789,
      "width": 1600,
      "height": 1131,
      "alt": "The code list with a countdown on each code and the next code shown."
    },
    {
      "path": "apps/sh.enigma.otp-vault/backup.png",
      "sha256": "sha256:27e9723b0f5a95e75019e62998a659908b862089dda83256e9231644a82f31bc",
      "size": 415638,
      "width": 1600,
      "height": 1131,
      "alt": "Backup and password: copy the encrypted vault, change the password or delete it."
    }
  ]
}