Xirag identity authenticator for agentic ERP
TOTP and HOTP codes and push approvals, generated entirely offline from one security-critical core that is shared, and reviewed once, across every platform you use.
In development, early access- ATAcme Traders (demo)
482 913TOTP - LFLotus Foods (demo)
107 664TOTP - PushSign-in request for Priya (demo): approve?Approve
- VaultSealed on this device; sync off
Identity authentication built to be verified
Every feature runs on the same Rust core: Android, Apple, Windows, Linux and Chrome share one implementation of the cryptography.
TOTP and HOTP codes
Standards-based six-digit codes (RFC 4226 and 6238), generated offline with no network round-trip.
Push approval
Approve a sign-in with a tap: no code to type, and nothing for a phishing page to intercept.
Sealed vault
Every secret is encrypted at rest with Argon2id key derivation and ChaCha20-Poly1305.
Shamir recovery
Split your recovery key across trusted people or devices, so there is no single point of failure.
Security keys and biometrics
FIDO2 and WebAuthn hardware keys for phishing-resistant sign-in, and quick unlock with your device's biometrics.
Zero-knowledge sync
Optional cross-device sync built so the backend never sees an unencrypted secret.
Status: in development, early access
- Add an account by QR code, an otpauth link or the secret, then read the code or approve the push.
- The vault stays local and encrypted; sync is optional.
Every workflow here works for people on their own. Agents are not offered at launch; they are provided on request later.
Works with
Try Xirag Authenticator early
Register for early access, or tell us how your team signs in today.