FiSSH

SSH authentication via Fingerprint scanning over network (TLS Sockets)

This Android app stores your SSH key phrase and sends it to your PC securely via the LAN when an authorized fingerprint is detected by the Android fingerprint scanner.

This app is free open-source software (licensed MIT)

The PC must either run Linux or Windows to use FiSSH.

FiSSH for Linux is available on GitLab together with install instructions at: https://gitlab.com/ioanm/fissh-desktop/blob/master/INSTALL.md.

FiSSH for Windows uses the Windows Subsystem for Linux. The Windows edition is also open source and published to: https://gitlab.com/ioanm/fissh-windows.

To install FiSSH for Windows run the command inside WSL (Windows Subsystem for Linux) UBUNTU distro:
curl https://gitlab.com/ioanm/fissh-windows/raw/master/Release/install.sh | sudo bash

The PC app then returns the received passphrase to OpenSSH and the standard ssh binary completes the login process.

It is important to note that none of the FiSSH apps have access to private key file and that FiSSH uses TLS sockets with certificate validation to prevent man-in-the-middle attacks!

Source Code:
Linux part - https://www.gitlab.com/ioanm/FiSSH-Desktop
Android app - https://www.gitlab.com/ioanm/FiSSH-App

Anti-Features

This app has features you may not like. Learn more!

The source code is no longer available, no updates possible

Versions

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid

Version 6.0 (60) suggested Added on Jul 12, 2023

arm64-v8a armeabi-v7a x86 x86_64

This version requires Android 6.0 or newer.

It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
- have full network access
  
  Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
- use biometric hardware
  
  Allows the app to use biometric hardware for authentication
- use fingerprint hardware
  
  Allows the app to use fingerprint hardware for authentication
- ro.ioanm.fissh.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK 17 MiB PGP Signature | Build Log
Version 5.3 (53) - Added on Jun 29, 2023

arm64-v8a armeabi-v7a x86 x86_64

This version requires Android 6.0 or newer.

It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
- have full network access
  
  Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
- use biometric hardware
  
  Allows the app to use biometric hardware for authentication
- use fingerprint hardware
  
  Allows the app to use fingerprint hardware for authentication
- ro.ioanm.fissh.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION
Download APK 17 MiB PGP Signature | Build Log
Version 5.2 (52) - Added on Aug 10, 2021

arm64-v8a armeabi-v7a x86 x86_64

This version requires Android 6.0 or newer.

It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.
Permissions
- have full network access
  
  Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
- use biometric hardware
  
  Allows the app to use biometric hardware for authentication
- use fingerprint hardware
  
  Allows the app to use fingerprint hardware for authentication
Download APK 16 MiB PGP Signature | Build Log