Flatsonar

Kerveros

by Alamahant

2FA Code Generator

Broad permissions Verified creator GPL-3.0-or-later v1.0.1
Install Source code
Screenshot 1 of Kerveros

About

Kerveros is a robust, cross-platform two-factor authentication (2FA) code generator that combines enterprise-grade security with user-friendly features. Generate time-based one-time passwords (TOTP) for all your online accounts while keeping your secrets encrypted and protected.

Key Features:

  • Master Password Protection: SHA-256 hashing with salting for enhanced security
  • Encrypted Secret Storage: XOR encryption with initialization vectors
  • TOTP Code Generation: RFC-compliant time-based one-time passwords
  • Real-time Code Updates: Automatic refresh every 30 seconds with visual countdown timer
  • QR Code Import: Drag and drop or file menu import of QR code images
  • One-Click Copy: Instant clipboard copy with visual feedback
  • Password Attempt Limiting: 5 attempts before factory reset option
  • System Tray Integration: Minimize to tray with quick restore
  • Export/Import Functionality: Full backup and restore capabilities
  • Single Instance Enforcement: Prevents multiple app conflicts

Kerveros is designed for security-conscious users who need a reliable, secure, and easy-to-use 2FA code generator with master password protection for all their online accounts including GitHub, Google, PayPal, Discord, and more.

Permissions

2 permissions weaken the sandbox. Flatsonar asks before installing.

  • X11 display: X11 lets apps read input and windows of other apps
    --socket=x11
  • access to unrecognised path 'xdg-documents/Kerveros:create'
    --filesystem=xdg-documents/Kerveros:create
  • inter-process communication (needed for X11)
    --share=ipc
  • Wayland display
    --socket=wayland
  • X11 display, only when Wayland is unavailable
    --socket=fallback-x11
  • GPU acceleration
    --device=dri
  • access to ~/MEGA
    --filesystem=~/MEGA
  • access to ~/pCloud Drive
    --filesystem=~/pCloud Drive
  • access to ~/Google Drive
    --filesystem=~/Google Drive
  • access to ~/Dropbox
    --filesystem=~/Dropbox
  • access to ~/Nextcloud
    --filesystem=~/Nextcloud
  • access to ~/OneDrive
    --filesystem=~/OneDrive
  • access to ~/Tresorit
    --filesystem=~/Tresorit
  • access to xdg-config/kdeglobals
    --filesystem=xdg-config/kdeglobals:ro
  • talks to com.canonical.AppMenu.Registrar
    --talk-name=com.canonical.AppMenu.Registrar
  • talks to org.kde.kconfig.notify
    --talk-name=org.kde.kconfig.notify
  • talks to org.kde.KGlobalSettings
    --talk-name=org.kde.KGlobalSettings

Who publishes this

The creator demonstrably controls this app id: Flathub verification, the hosting account owns the namespace, or a well-known file on their domain.

  • verified on Flathub: the developer proved they control this app id
    publisher:flathub

Maintenance

Recent activity on the upstream repository, or built and reviewed by Flathub.

No staleness signals: recent activity, or built and reviewed by Flathub.