FiSSH

SSH authentication via Fingerprint scanning over network (TLS Sockets)
This Android app stores your SSH key phrase and sends it to your PC securely via the LAN when an authorized fingerprint is detected by the Android fingerprint scanner.

This app is free open-source software (licensed MIT)

The PC must either run Linux or Windows to use FiSSH.

FiSSH for Linux is available on GitLab together with install instructions at: https://gitlab.com/ioanm/fissh-desktop/blob/master/INSTALL.md.

FiSSH for Windows uses the Windows Subsystem for Linux. The Windows edition is also open source and published to: https://gitlab.com/ioanm/fissh-windows.

To install FiSSH for Windows run the command inside WSL (Windows Subsystem for Linux) UBUNTU distro:
curl https://gitlab.com/ioanm/fissh-windows/raw/master/Release/install.sh | sudo bash

The PC app then returns the received passphrase to OpenSSH and the standard ssh binary completes the login process.

It is important to note that none of the FiSSH apps have access to private key file and that FiSSH uses TLS sockets with certificate validation to prevent man-in-the-middle attacks!

Source Code:
Linux part - https://www.gitlab.com/ioanm/FiSSH-Desktop
Android app - https://www.gitlab.com/ioanm/FiSSH-App

Packages

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 5.2 (52) suggested Added on 2021-08-10

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication

    Download APK 16 MiB PGP Signature | Build Log

  • Version 4.2 (42) - Added on 2020-12-18

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • use fingerprint hardware
      Allows the app to use fingerprint hardware for authentication
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.

    Download APK 1.9 MiB PGP Signature | Build Log

  • Version 4.1 (41) - Added on 2020-12-01

    This version requires Android 6.0 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Permissions
    • use biometric hardware
      Allows the app to use biometric hardware for authentication
    • have full network access
      Allows the app to create network sockets and use custom network protocols. The browser and other applications provide means to send data to the internet, so this permission is not required to send data to the internet.

    Download APK 1.9 MiB PGP Signature | Build Log