RotarySafe

What is RotarySafe?

RotarySafe is a two-factor authentication manager for Android and Wear OS that stores every secret on your devices and unlocks TOTP codes with a physical rotary combination — no server, no cloud sync, no copy of your secrets sitting somewhere you didn't choose.

How It Works

Set a rotary combination on your Wear OS watch crown — like a miniature combination safe on your wrist. You can switch between bezel or crown view to customize as needed. When you need a 2FA code, enter your combination by turning the bezel or crown. RotarySafe verifies it and displays the live TOTP code directly on your watch face. Nothing leaves your devices.

Security Architecture

Zero Network Access

RotarySafe holds no INTERNET permission and makes zero network requests. A server breach cannot expose your secrets, because there is no server.

Encrypted Storage

• All TOTP secrets are stored in Android EncryptedSharedPreferences, backed by the Android Keystore and hardware-bound where your device supports it.
• Your rotary combination is stored only as a PBKDF2-HMAC-SHA256 hash (100,000 iterations, 16-byte random salt per setup). The raw combination is never stored or logged.

Secure Communication

• Every phone-to-watch message is encrypted with AES-256-GCM using a fresh random IV.
• The session key is established via ephemeral ECDH (NIST P-256) on every pairing — no long-term shared secret to steal.
• After three failed combination attempts, the app hard-locks and requires biometric authentication on the phone to clear.

Backup Security

Encrypted backups use Argon2id for key derivation. Keep your backup in a secure location, such as your private cloud storage. You'll need it to restore your accounts on a new device.

Compatibility

Wear OS Required: RotarySafe requires a paired Wear OS watch. The watch provides the rotary combination interface and displays TOTP codes directly on the wrist.

Standard TOTP Support (RFC 6238): Works with Google, GitHub, AWS, Microsoft, and any service that provides a standard authenticator QR code. Import by scanning the issuer QR code with the phone app.

Pricing