5M Auth

Secure blockchain wallet for passwordless authentication via QR code signing.

5M Auth is a self-sovereign identity wallet that replaces passwords with blockchain-based authentication. Generate an Ethereum key pair on your device, store your identity data locally, and authenticate with Web3 services by scanning QR codes and signing cryptographic challenges.
HOW IT WORKS
1. Generate or import an Ethereum wallet — your private key never leaves your device.
2. Fill in your profile with the information you choose (name, email, phone, address, national ID).
3. When a service requests authentication, scan the QR code displayed on the screen.
4. Review the requested permissions and approve only the data you want to share.
5. The app signs the challenge with your private key and sends the response — no passwords, no cloud accounts.

KEY FEATURES
Passwordless Authentication
Scan a QR code, review the request, and approve. Your cryptographic signature proves your identity without transmitting a password.

Your Data, Your Device
All personal information and wallet keys are stored locally in your device's secure storage (Keystore). Nothing is uploaded to a central server. You decide what to share, every time.

Biometric & PIN Protection
Lock access to your profile and wallet settings with fingerprint, face recognition, or a PIN code.

Backup & Recovery
Split your private key into two encrypted backup parts protected by a passphrase. Store them separately for safe recovery.

Multi-Language Support
Available in English, Icelandic, Japanese, and Polish.

Authentication History
Review a full log of every authentication you have performed — service name, permissions granted, date and time — all stored locally.

Company Profiles
Store company information (name, identification number, VAT number) for business authentication and invoicing.

Open Standards
Built on Ethereum signatures and OAuth2 consent flows, compatible with any service that integrates with the 5M SSO2 platform.

PRIVACY BY DESIGN
- Private keys never leave your device.
- No third-party analytics, advertising SDKs, or crash reporters.
- Diagnostic logs (device ID, app version, error info) may be sent to our servers to improve stability — they are not linked to your identity.
- You can view, edit, or delete all stored data at any time, or reset the app entirely.

PERMISSIONS
- Camera: Required to scan QR codes for authentication.
- Biometrics: Optional, to secure access to your profile.