KEMLatch

KEMLatch is a two-factor authentication app that generates the standard 6-8 digit verification codes you already use - while protecting the underlying secret with post-quantum cryptography. Your one-time codes stay fully compatible with every service that supports authenticator apps (RFC 6238 TOTP). What's different is everything around the secret: how it is stored, backed up, and transferred is secured with NIST post-quantum algorithms (ML-KEM and ML-DSA), so a captured backup or intercepted transfer cannot be unlocked - even by a future quantum computer. FEATURES - Standard TOTP/HOTP codes that work with the services you already use - Add accounts by scanning a QR code or entering a key manually - Encrypted on-device vault, unlocked with Face ID or Touch ID - Post-quantum encrypted backups (.kemlatch), signed and tamper-evident - Import from plaintext otpauth QR codes, clearly flagged as legacy - No account required, no tracking, no ads - works fully offline SECURITY - Codes never leave your device - Vault key held in the Secure Enclave / Keychain - Backups are AES-256-GCM encrypted, ML-KEM key-wrapped, and ML-DSA signed - Clipboard auto-clears; sensitive screens hidden from the app switcher KEMLatch keeps the time-based codes you rely on, and locks the seed behind cryptography built to last.