MFA authenticator
TOTP codes for any service that supports authenticator-app TOTP — generated locally, opened only by you.
Lume Auth · personal appMFA, passwords, and notes — locked by you.
Personal appAvailable
Keep MFA codes, passwords and secure notes in one app, unlocked by your face. There is no master password. The app derives the key on-device and discards it after use; biometric images and plaintext templates are not stored.
Security scope
- A face check does not by itself restore unavailable encrypted vault or message data. Recovery depends on the supported backup and account process.
Personal, by design
Unlocked by you.Three tools, one vault
One face unlock for your private essentials.
Password manager
All your logins in a biometric-locked vault — no master password to remember or leak.
Secure notes
API keys, seed phrases, and private documents, encrypted at rest and unlocked only by your scan.
How it works
Your face unlocks the vault on your phone.
Scan
A quick biometric scan generates a cryptographic key on-device, in real time.
Unlock
The key decrypts your codes, passwords, and notes locally — their plaintext is not sent to a server.
Discard
The derived key is discarded after use. The encrypted vault and sealed recovery data remain.
Why Lume Auth
The protection behind your vault.
Post-quantum encryption
ML-KEM and ML-DSA — NIST FIPS 203 and 204 — so your data stays protected as computing power advances.
Zero-knowledge
We have no ability to read your passwords, messages, or notes. The server is mathematically blind to your content.
No biometric images stored
Your scan generates a key on-device and discards it. Biometric images and a plaintext template are not transmitted or saved; sealed recovery data is retained.
Works as you change
Error-correcting codes keep a beard, glasses, makeup, lighting, or years of aging within tolerance — re-deriving the exact same key, with no stored template to update.
A live face check protects vault access
Protected content requires a live scan to unlock. No PIN fallback, no master password. This does not guarantee protection after an endpoint is compromised.
Move to a new phone
An encrypted backup only your biometric can unlock restores your vault on a new phone — no passwords to transfer.
Download
Keep your private essentials close.
Free on iOS and Android. No master password, ever.
Looking for encrypted messaging?Meet Chat in Lume Auth