DEPRECATED Krypton turns your iOS device into a WebAuthn/U2F Authenticator: strong, unphishable 2FA.
This project is not maintained. Please migrate to Akamai MFA.
Krypton turns your iOS device into a WebAuthn/U2F Authenticator: strong, unphishable 2FA.
Krypton implements the standardized FIDO Universal 2nd Factor (U2F) protocol to provide secure, unphishable two-factor authentication on the web, now in the convenient form factor that is your phone.
Install our companion browser extension at: https://krypt.co/start.
Krypton supports developer mode so you can use Krypton as a security key for SSH and PGP private keys in addition to U2F.
Download our command line utility curl https://krypt.co/kr | sh
and type kr pair
to securely pair Krypton with your computer. Krypton integrates with the ssh
command to send signature requests right to your phone. Krypton also makes signing Git commits and tags with PGP easy: run kr codesign
to get started.
Krypton is built on top of an end-to-end verified and encrypted architecture. This means zero trust. We, Krypt.co, have zero information about keys or where you’re authenticating. The keys only live in the Krypton app on your phone.
Learn more about Krypton’s security architecture.
For more information, check out krypt.co.
Instructions below only work for macOS
curl https://sh.rustup.rs -sSf | sh
rustup target add aarch64-apple-ios
rustup target add armv7-apple-ios
rustup target add armv7s-apple-ios
rustup target add x86_64-apple-ios
rustup target add i386-apple-ios
rustup update
cargo install cargo-lipo
brew install libtool
brew install autoconf
brew install automake
The Android implementation is located here.
krypt.co follows a 7-day disclosure policy. If you find a security flaw,
please send it to [email protected]
encrypted to the PGP key with fingerprint
B873685251A928262210E094A70D71BE0646732C
(grab the full key here). We ask that you
delay publication of the flaw until we have published a fix, or seven days have
passed.
We are currently working on a new license for Krypton. For now, the code
is released under All Rights Reserved.