I have made the Toqen.app mobile application publicly available.

This is a deliberate decision to move toward transparency and independent technical review.

The mobile client is the part of the system that users directly interact with during authorization.

It is now open for inspection so anyone can verify how access is processed on the device.

What is Toqen

Toqen is an access-first authentication infrastructure designed for secure, real-time authorization.

Each access request is:

created in real time

explicitly approved by the user

cryptographically signed by the device

verified by the backend

The mobile app acts as a secure execution layer for these decisions.

What the open source mobile app actually does

The mobile client has a very narrow and well-defined responsibility:

scan or receive an access request

fetch request context from the backend

show the user what is being requested

collect explicit approval or denial

sign a short-lived challenge using a device key

send the signed result…