#Accsify Authenticator - User Manual & Technical Guide

Version: 1.0.0
Official Website: accsify.com
Support Contact: accsify.com/contact
Official Channel: Telegram (@accsify)

---

#1. Introduction

Accsify Authenticator is a premium, offline-first, portable two-factor authentication (2FA) manager for Windows. Designed specifically for security, speed, and native screen-reader accessibility, it enables you to manage your TOTP/HOTP security credentials with peace of mind.

All cryptographic operations and data storage are performed locally on your workstation, protecting your credentials from remote intercept or cloud leaks.

---

#2. Key Features

• AES-256-GCM Local Vault: Your credentials are saved inside an encrypted SQLite database (authenticator.db) located directly in the application folder.
• Fully Accessible UI: Developed with virtual list controls and native accessibility labels (MSAA/UIA) for complete compatibility with modern screen readers (NVDA, JAWS, Narrator).
• Flexible Category Tree: Organize your tokens into custom categories and nested subcategories.
• Adaptive Lock Controls: Choose between immediate locking, automatic lock on Windows workstation lock, or configure a customized grace period (up to several minutes) for seamless developer workflow.
• Anti-Spying Screenshot Protection: Utilizes Windows Display Affinity API (WDA_EXCLUDEFROMCAPTURE) to prevent remote desktop clients, screen recorders, and malicious malware from capturing your authentication codes.

---

#3. Getting Started

#3.1 Setup & Installation

Accsify Authenticator is fully portable.

1. Place the application files (including the executable and asset files) in a folder on your system.
2. Ensure the folder is writable so the application can save configuration details and initialize your database.
3. Run the executable to launch the startup wizard.

#3.2 Vault Initialization Wizard

On your first run:

1. You will be greeted by the Startup Wizard.
2. Create a strong Master Password. This password is used to generate the database encryption key.

   [!WARNING] Your Master Password is never sent online and cannot be recovered. If lost, your vault database cannot be decrypted.

3. Select your UI Theme preferences (System, Light, or Dark).
4. Configure Security Preferences:
   • Screen Lock Settings: Choose whether to lock the vault immediately on closure or enable a convenience grace period.
   • Screenshot Protection: Toggle whether the application window is hidden from screenshot and sharing programs.

---

#4. User Guide & Usage Details

#4.1 Accessing the Vault

Whenever the application starts or is locked:

1. You will be prompted to enter your Master Security Password.
2. For safety, the login screen permits up to 5 attempts. Exceeding these attempts will lock the session and close the application to protect against brute-force attacks.

#4.2 Managing Tokens

• Adding a Token: Open the Add Token Dialog (Ctrl + N). Fill in the Service Provider, Account Name, and the 2FA Secret Key (Base32). Select its category from the dropdown list.
• Organizing Categories: Open the New Folder Dialog (Ctrl + Shift + N) to add specialized categories. Drag or assign tokens to these categories for structured listing.
• Copying Verification Codes: Click or select the token and press Ctrl + C or double-click to copy the code. The 2FA code is copied to your clipboard.

#4.3 Lock Controls

• Lock Vault (Ctrl + L): Instantly locks the database and invalidates the session keys in memory.
• Session Locking: By default, the application detects Windows Session events. When you lock your computer (Win + L), the vault automatically locks itself.

---

#5. Security & Privacy Architecture

#5.1 Local Cryptography

• Database Encryption: Secrets are stored in a standard SQLite file, encrypted using robust AES-256-GCM. The key is derived using PBKDF2 from your master password.
• DPAPI Key Storage: High-safety caching (like grace-period auto-unlock secrets) uses the Windows Data Protection API (DPAPI), which locks the credentials using keys managed natively by the OS user profile.

#5.2 Network Policy

• Zero Network Exposure: Your accounts, labels, secret keys, and passwords never leave your local machine. All cryptographic operations occur entirely offline.

---

#6. Accessibility & Keyboard Shortcuts

Accsify Authenticator features optimized UI tab traversal and customized screen-reader support.

#6.1 Keyboard Mappings

Key Command	Action
Ctrl + N	Open "Add Token" Dialog
Ctrl + Shift + N	Open "Add Category" Dialog
Ctrl + C	Copy currently selected verification code to clipboard
Ctrl + L	Instantly lock the vault (session terminates)
F1	Open help links / online documentation
Tab / Shift + Tab	Navigate focus through major regions: Category Tree $\rightarrow$ Token Grid $\rightarrow$ Search Box $\rightarrow$ Toolbar
Arrow Keys (inside Toolbar)	Cycle focus between the toolbar items
Space / Enter (focused Toolbar)	Click the selected toolbar action
Apps Key / Shift + F10	Display the context menu for the selected token

---

#7. Support & Troubleshooting

• Database Missing Error: If the database file is deleted or renamed, restore it to the application directory.
• Read-Only Directory Warning: If the application is launched from a protected directory (e.g., Program Files without Admin rights), configure a database filepath in a writable location.