Stay Safe with Easy 2FA
- Passwords are reused, stolen, phished and hacked — quite simply, the username-password model is weak and will leave you vulnerable
- Using hardware-based two-factor authentication, you can quickly verify your identity and fortify your accounts against attackers
User-controlled Encrypted Backup
- Backs up all your services to an encrypted file that you control
- Secures your backup with a 12 or 24-word Recovery Phrase
- Restores services to new or additional devices effortlessly
- Generates codes in the Trusted Execution Environment, leveraging advanced isolated execution with hardware protections
- Monitors the state of your mobile device and disables code generation when it changes
- Displays codes in the Trusted User Interface — a shield against spyware*
- Functions completely offline, within your device — we never see your keys, codes, or even backups
How does Rivetz compare?
Rivetz Authenticator is leading the transition to hardware protection. The traditional approach to app-based 2FA one-time passwords is to generate codes in software, exposing them to the Android operating system and potential malware. Rivetz Authenticator is built from the ground up with hardware-based trusted processing.
The previous generation of 2FA apps either don’t back up your services or force you to trust their cloud backups. Rivetz Authenticator puts the control of backup and recovery back in your hands with a transparent, user-controlled process that allows you to save encrypted backups however you choose – email them to yourself, save them locally, upload them to your favorite secure storage service.
Unlike other Authentication apps, Rivetz leverages the hardware-based Trusted Execution Environment and provides peace of mind by giving you complete control over your services without collecting your data or compromising your privacy.
Ensuring broad device compatibility and secure hardware-level processing is tricky -- each device manufacturer implements TEE access differently. So, what does this mean for you and the Open Beta?
If you’re on a Samsung smartphone running Android OS 7 or above, you should be good to go! Samsung has invested significantly in TEE optimization and, as they are the most popular Android brand globally, it made sense for us to focus our development efforts on supporting Samsung devices as comprehensively as possible. Should you notice compatibility issues, we’d love to hear from you at firstname.lastname@example.org
As for devices from the other leading Android manufacturers, including LG, Motorola, HTC, and Sony, we are working hard to fully supported their devices as soon as possible.
Rivetz Authenticator supports the Initiative for Open Authentication’s (OATH) time-based one-time passwords ( TOTP), which are used by most top web services that employ 2FA. We also support the hash-based message authentication code (HMAC) standard, which we implement as HMAC “counter-based” one-time passwords ( HOTP). Supporting these open standards means that no proprietary server-side component is necessary.
What about the RvT token?
We’ve chosen not to erect a paywall for our maiden launch. After all, this is an Open Beta and we want to encourage everyone to give it a go by making it easy and free for all to download and explore.
While this release of Authenticator does not yet require the use of our RvT token, we expect the first use of tokens to be wrapped around attestation services. Rivetz Authenticator’s core functionality of securely generating your 2FA codes in the TEE will remain free. As the Open Beta progresses, we may charge a fee to those who would like to continue enjoying our awesome Device State Check and Backup & Recovery services.
You’ll soon be able to purchase RvT securely from our Rivetz Store using a major payment card, bitcoin, or Ethereum.
Rivetz Authenticator is sponsored and officially published by Rivetz International. Developers are encouraged to build their own authentication app that uses both the Trusted Execution Environment (TEE) and Trusted User Interface (TUI) on compatible Samsung devices for a truly secure display of codes and recover phrases and more by using our developer Toolkit. Visit developer.rivetz.com for details.