SecureGen

esp32, security, password, 2fa, microcontrollers

3 followers

esp32, security, password, 2fa, microcontrollers

3 followers

Free

Launch tags:Open Source•Privacy•GitHub

Launch Team / Built With

Wispr Flow: Dictation That Works Everywhere — Stop typing. Start speaking. 4x faster.

Stop typing. Start speaking. 4x faster.

Promoted

Maker

📌

👋 Hey Product Hunt! I'm excited to share SecureGen - an open-source hardware 2FA authenticator and password manager I built on ESP32. **🤔 Why I built this:** I got tired of trusting my 2FA codes to phone apps (always online, closed source, vulnerable to remote attacks). Hardware tokens like YubiKey are great, but expensive ($50+) and you can't see codes or manage passwords. So I built my own for $15 using an ESP32 T-Display. **✨ What it does:** 🔐 TOTP Authenticator - works like Google Authenticator, but offline 🔒 Password Manager - encrypted vault with BLE keyboard typing 📱 Types passwords wirelessly - connects via Bluetooth to any device 🌐 Web management - add/edit via QR code scanning 🔋 Battery powered - completely portable 💾 AES-256 encryption - military-grade security **🛠️ Technical highlights:** - 7-layer security architecture (ECDH key exchange, dynamic APIs, anti-timing attacks) - LE Secure Connections with MITM protection for Bluetooth - Works completely offline (air-gapped mode for maximum security) - Hardware-based encryption keys from ESP32 chip parameters - Memory-optimized BLE + WiFi coexistence (this was painful to get right!) - Configurable keyboard layouts for international users **👥 Perfect for:** ✅ Privacy-conscious users who want verifiable security ✅ Self-hosters building their own infrastructure ✅ Makers/hackers who love DIY hardware ✅ Anyone wanting offline 2FA and password storage ✅ Teams needing shared secure access **📦 What you need to build:** - LILYGO T-Display ESP32 board (~$15 on AliExpress) - USB-C cable for flashing - Optional: 3.7V LiPo battery for portability Pre-compiled binaries available - just flash and go! Full source code on GitHub for those who want to audit/modify. **🔗 Resources:** 📦 GitHub (code + docs): https://github.com/makepkg/Secur... 🎥 2-min demo video:

🛠️ Detailed build guide: https://hackster.io/makepkg/secu...... 📝 Technical deep-dive: https://dev.to/makepkg/implement... **🚀 What's next:** Currently working on: - U2F/FIDO2 support for hardware security keys - Encrypted SD card backup - Custom 3D-printed enclosure designs **💬 I'd love to hear:** - What would YOU want in a hardware security device? - Any privacy/security features I should prioritize? - If you build one, share pics - I'd love to see it! 📸 Happy to answer any technical questions about the build, security implementation, or ESP32 development! Thanks for checking it out 🙏

Report

3mo ago

Maker

SecureGen v2.3.0

🔐 Security Enhancements

Duress PIN — multi-layer duress PIN triggers advanced memory zeroing; real vault is wiped and replaced with decoy accounts on duress entry.
Credential Validation — login name cannot appear inside the password; enforced at registration and password change.
Mimicry Headers — obfuscation layer now generates more convincing decoy Authorization/Session headers; fixed header obfuscation logic bug.

✨ Web Interface

Password Categories — passwords can be organized into named categories with folder-style navigation in the web cabinet.
Security Badges — visual indicators on password entries: strength meter, duplicate detection, PIN-only flag, name-in-password warning.
Display Orientation — screen rotation configurable from web cabinet.
Display Auto-Dim — screen dim timeout configurable from web cabinet.
Debug UI — internal diagnostics panel (debug builds only).
BLE PIN Setting removed — setting was non-functional (PIN is random-generated, not configurable); removed from UI.

🐛 Bug Fixes

BLE PIN Display — fixed zero-padding bug showing 0 instead of 000006.
AP Mode Web Server — fixed server not stopping on AP mode exit.
AP Mode Sessions — fixed session lifecycle bug causing sessions to persist across AP restarts.
URL Obfuscation — fixed mapping bug causing endpoint resolution failures.

📖 Documentation

RTC Mastering Guide — DS3231 wiring diagrams, pin assignments for ESP32 and S3, enabling RTC in firmware, troubleshooting.
Porting Guide — step-by-step instructions for adapting SecureGen to new ESP32/S3 boards: board header creation, platformio.ini configuration, capability flags, deep sleep wake pins, display geometry, security checklist, common mistakes.

Flash from browser: makepkg.github.io/SecureGen/flash
Full free repo: github.com/makepkg/SecureGen

Report

6d ago

Maker

🔄 Update — March 2026

v2.1.0 is out with significant improvements:

- DS3231 RTC module support (offline TOTP without WiFi)

- HOTP counter-based codes

- 5-language web interface

- Boot mode system (WiFi / AP / Offline)

- Light sleep crash fix on battery power

Flash from browser: makepkg.github.io/SecureGen/flash

Full changelog: github.com/makepkg/SecureGen

Report

2mo ago

Maker

Report

3mo ago

Reviews

Most Informative

SecureGen v2.3.0

🔐 Security Enhancements

Duress PIN — multi-layer duress PIN triggers advanced memory zeroing; real vault is wiped and replaced with decoy accounts on duress entry.

Credential Validation — login name cannot appear inside the password; enforced at registration and password change.

Mimicry Headers — obfuscation layer now generates more convincing decoy Authorization/Session headers; fixed header obfuscation logic bug.

✨ Web Interface

Password Categories — passwords can be organized into named categories with folder-style navigation in the web cabinet.

Security Badges — visual indicators on password entries: strength meter, duplicate detection, PIN-only flag, name-in-password warning.

Display Orientation — screen rotation configurable from web cabinet.

Display Auto-Dim — screen dim timeout configurable from web cabinet.

Debug UI — internal diagnostics panel (debug builds only).

BLE PIN Setting removed — setting was non-functional (PIN is random-generated, not configurable); removed from UI.

🐛 Bug Fixes

BLE PIN Display — fixed zero-padding bug showing 0 instead of 000006.

AP Mode Web Server — fixed server not stopping on AP mode exit.

AP Mode Sessions — fixed session lifecycle bug causing sessions to persist across AP restarts.

URL Obfuscation — fixed mapping bug causing endpoint resolution failures.

📖 Documentation

RTC Mastering Guide — DS3231 wiring diagrams, pin assignments for ESP32 and S3, enabling RTC in firmware, troubleshooting.

Porting Guide — step-by-step instructions for adapting SecureGen to new ESP32/S3 boards: board header creation, platformio.ini configuration, capability flags, deep sleep wake pins, display geometry, security checklist, common mistakes.

Flash from browser: makepkg.github.io/SecureGen/flash

Full free repo: github.com/makepkg/SecureGen