HyID is a native Swift iOS two-factor authentication app (based on the open-source 'Tofu' authenticator) that generates one-time passwords for login security. It reads HOTP/TOTP otpauth URLs via QR-code scanning (AVFoundation), decodes Base32 secrets, computes OTPs with HMAC-SHA1 / SHA-256 / SHA-512, stores accounts securely in the iOS Keychain, and locks the app behind a 4-digit PasscodeLock that re-arms on backgrounding.
HyID is a native Swift iOS two-factor authentication app (based on the open-source 'Tofu' authenticator) that generates one-time passwords for login security. It reads HOTP/TOTP otpauth URLs via QR-code scanning (AVFoundation), decodes Base32 secrets, computes OTPs with HMAC-SHA1 / SHA-256 / SHA-512, stores accounts securely in the iOS Keychain, and locks the app behind a 4-digit PasscodeLock that re-arms on backgrounding.
Built HyID, a branded Swift iOS two-factor authenticator for protecting online accounts, inspired by and extending the open-source Tofu app - QR-based token enrollment, offline OTP generation, and a passcode-protected, keychain-backed experience.
Delivering a secure two-factor authenticator required offline OTP generation, QR-based account onboarding and a passcode-protected, keychain-backed experience.
Implemented the OTP core in Swift/Foundation using CommonCrypto (CCHmac) for HMAC-SHA1/SHA256/SHA512, parsing otpauth:// URLs and Base32 secrets, scan-to-add via AVFoundation metadata output, persisting accounts in the Keychain with NSKeyedArchiver, and wrapping the UI with a PasscodeLock (enter/confirm/change/set states) presented on launch and app-background.
Implemented the OTP core in Swift/Foundation using CommonCrypto (CCHmac) for HMAC-SHA1/SHA256/SHA512, parsing otpauth:// URLs and Base32 secrets, scan-to-add via AVFoundation metadata output, persisting accounts in the Keychain with NSKeyedArchiver, and wrapping the UI with a PasscodeLock (enter/confirm/change/set states) presented on launch and app-background.
Native iOS app for OTP generation and account management.
HOTP/TOTP engine with HMAC and Base32 decoding.
AVFoundation QR scanning and iOS Keychain storage.
Built with Swift, UIKit and PasscodeLock across the iOS project.
Delivered through structured phases - discovery, design, build, integration, and launch - with iterative releases and ongoing enhancements across a mobile security & identity delivery.
Manual, disconnected workflows and limited visibility across operations.
An integrated, automated mobile security & identity solution with a unified experience, stronger controls and measurable efficiency.
Native Swift two-factor authenticator.
TOTP/HOTP with HMAC-SHA1/SHA256/SHA512.
Keychain-backed accounts plus PasscodeLock.