ShakeMyHand - One-time passwords for humans. Know who you're dealing with. | Product Hunt

One-time passwords for humans.

Know who you're dealing with.

Ever wondered if that 'urgent' message from your boss is legit, or if your friend's quirky text was actually sent by them? In this era of digital trickery, ShakeMyHand is here to help. It's a nifty app that cuts through the noise, ensuring that the person texting you for your weekend plans or the team member pinging you for a last-minute meeting is the real deal. No more second-guessing texts or emails. With ShakeMyHand, peace of mind is just a quick verification away, keeping your digital conversations authentic and worry-free.
Download for iOS (free!)Download for Android (coming soon)
Safeguard financial transactions with colleagues, friends, and family: Before sending bank transfers or sending money through apps like Venmo or PayPal based on an e-mail, text request, or phone call, use ShakeMyHand to confirm it's truly your colleague or friend asking.
Verify messages from family members: When you receive unusual requests or messages from family members, especially in urgent situations, ShakeMyHand can confirm their authenticity.
Team data security: Need to swap login details or API keys in your team? With ShakeMyHand's easy passphrases, team members can make sure they're sharing sensitive info with the right people, keeping everything tight and secure, especially in remote setups.
Grant roles and permissions securely: When a team member needs new roles or privileges in a tool or system, ShakeMyHand steps in. Just swap a quick passphrase to confirm it's them asking, and you're all set to update access safely.
Confirm the identity of remote team members: Before sharing sensitive project details in a virtual team meeting, use ShakeMyHand to ensure you're communicating with the actual team.

How does it work?

  1. Install the app: First, both you and your contact (be it a friend, colleague, relative, or anyone else) need to download ShakeMyHand on your phones.
  2. Scan the QR code: Next time you meet in person, open ShakeMyHand and scan each other's QR code. This is a quick and secure way to exchange digital identifiers, much like modern, secure business card exchange.
  3. Synced for life: After scanning, your apps are now paired. From this point on, both phones will generate the same secret three-word passphrase. This passphrase acts as a unique, lifelong password that remains in perfect sync everytime it re-generates.
  4. Verification anytime: Now, whenever you need to confirm each other's identity - through text, email, phone calls, or video chats - use your shared passphrase. A matching phrase means you're communicating with the right person, ensuring authenticity in your digital interactions.
Download for iOS (free!)Download for Android (coming soon)

Security

  1. Time-based pass phrases: Just like an authenticator app such as Google Authenticator and Authy, ShakeMyHand generates regularly changing passwords. However, instead of interfacing with some SaaS app or website, it pairs with another human being, using easy, human-friendly words instead of numbers.
  2. Cryptography: Under the hood, we've got some heavy-duty lock-and-key stuff going on that keeps your handshakes safe. Think of it as an uncrackable code that only you and the person you're chatting with can understand.
  3. Unique to you: When you pair up with someone, your apps create a secret recipe that's just for the two of you. It's like having a secret handshake that nobody else knows. This makes sure that the person you're talking to is actually who they say they are.
  4. No middle man: All this security happens right on your phone. There's no middle man, no big server somewhere holding onto your secrets. Same goes for the person you paired with. Technically, you both could disconnect from the internet forever and the shared pass phrase would still be in-sync.

Screenshots

Download for iOS (free!)Download for Android (coming soon)