A private AmL authenticator

Your codes, in your circle.

OneAuth keeps two-factor codes focused, portable, and under your control. Setup scans AmL and MessageMe circular visual codes only - never standard QR codes.

Get OneAuth Read the docs
  • Encrypted vault
  • On-device by default
  • Circular codes only
OneAuth home screen with an empty encrypted vault and Add account button
Real Android build · empty vault · circular-only enrollment
0QR / otpauth setup
Circular codes only.
1Local vault
Secrets stay on device.
5Platform targets
Phone, desktop, and Ubuntu Touch.
5Live downloads
Signed packages on the AmL channel.
Real app, real device

The current OneAuth UI, not a concept render.

Captured from the running Android release after the home redesign, settings polish, and verified updates work.

OneAuth home with vault ready state and trust chips
HomeEncrypted vault, trust chips, and a clear first Add account action.
OneAuth how-to steps on the home screen
How to useThree quiet steps from circular code to rotating digits.
OneAuth Add account screen with scan, image import, and manual recovery
Add accountScan, choose a circular code image, or enter a recovery secret.
OneAuth settings with privacy toggles and vault export
SettingsHide codes, lock on leave, export, and import with a recovery passphrase.
OneAuth App updates screen showing installed version and SHA-256 verification
App updatesManual checks against the signed AmL manifest with SHA-256 digests.
Quiet setup

Three steps. Then codes every 30 seconds.

1

Open a circular visual code

In MessageMe or another OneAuth-aware app, show the enrollment code - not a square QR.

2

Scan or import the image

Tap Add account, then capture with the camera or pick a compatible code image.

3

Copy the rotating code

Digits appear on Home and refresh automatically. Hide them when you want privacy.

Authentication without the noise

Built for private codes, not clutter.

Circular-only setup

Provision accounts from AmL and MessageMe circular visual codes. Standard QR and otpauth links are rejected on purpose.

Encrypted local vault

Secrets stay on the device in an encrypted vault. The master key lives in the operating-system secure store.

Scan or import

Use the camera or pick a MessageMe-compatible circular code image when you add an account.

Manual recovery entry

Enter issuer, label, and Base32 secret yourself when you need a recovery path without a visual code.

Privacy controls

Hide digits until you need them, and lock OneAuth when the app leaves the foreground.

Verified updates

Check signed releases from auth.aml.one with SHA-256 digests. OneAuth never auto-installs updates.

Your vault. Your device. Your rules.

OneAuth is designed around local control and deliberate transfer. It contacts AmL only for signed update metadata you ask for.

Local by defaultAuthenticator data belongs to you and stays in the on-device vault.
Circular boundaryAmL and MessageMe circular visual codes only - standard QR is never accepted.
Verified packagesDownload from auth.aml.one or the shared AmL downloads page and check SHA-256.

Built for your devices.

Signed OneAuth packages appear here as each platform is ready. Same AmL release channel as MessageMe and AmL Launcher.

Open downloads Install guide
Androidv1.3.1Windowsv1.3.1macOSv1.3.1Linuxv1.3.1Ubuntu Touchv1.3.1

Keep access in your circle.

Android, Windows, macOS, Linux, and Ubuntu Touch - one private authenticator family.

Get OneAuth
Meet MessageMe AmL Launcher OneAuth docs Update manifest