TrustMobile — Mobile Authenticator

Cross-platform Flutter mobile authenticator for enterprise MFA and device-bound identity. Supports EC P-256 device key generation, push and inline MFA approval flows, offline TOTP, secure pairing with backend identity services, and release hardening including TLS pinning — extending workforce authentication to mobile endpoints.

Identity & Security Ongoing
TrustMobile — Mobile Authenticator

Technology Stack

Flutter Dart EC P-256 TOTP Push MFA TLS Pinning Mobile Crypto REST APIs OAuth2 Device Pairing Offline MFA

Key Results

Cross-platform Flutter (iOS & Android)
Platforms
EC P-256 device keys, secure pairing
Crypto
Push, inline approval, offline TOTP
Mfa Modes
TLS pinning and mobile release hardening
Security
Pairs with enterprise IdP and workforce identity APIs
Integration
Pre-commercial (private)
Release Stage

Challenges & Solutions

  • Generating and protecting device-bound cryptographic keys on iOS and Android
  • Implementing secure device pairing and refresh flows with backend identity services
  • Delivering push and inline MFA experiences with clear user trust signals
  • Supporting offline TOTP when network connectivity is unavailable
  • Applying TLS pinning and release hardening for enterprise mobile deployment
  • Keeping mobile client behavior aligned with IdP token and session policies

Project Stats

N/A
Team
Ongoing
Duration