OneAuth Downloads
Private authenticator builds for every AmL platform.
Android
| Label | Version | Build | Date | Size | Notes | Download |
|---|---|---|---|---|---|---|
| v1.2.8-260908 Latest | 1.2.8 | 10208 | 2026-09-08 | 24.1 MB | Download | |
| v1.2.7-260906 | 1.2.7 | 10207 | 2026-09-06 | 24.1 MB | Download | |
| v1.2.6-260906 | 1.2.6 | 10206 | 2026-09-06 | 24.1 MB | Download | |
| v1.2.5-260828 | 1.2.5 | 10205 | 2026-08-28 | 23 MB | Download | |
| v1.2.4-260823 | 1.2.4 | 10204 | 2026-08-23 | 23 MB | Download |
Show 2 older releases
- ImprovementOneAuth stays in portrait on phones, including Ubuntu Touch
- ImprovementTap the eye on a hidden code again to hide it, instead of waiting five seconds
- BugfixHide authentication codes and Lock when app leaves foreground now stay on after you leave Settings
- BugfixApproving App Builder sign-in after linking a new OneAuth no longer shows a raw "Bad state" error when this phone is missing the original sign-in key.
- FeatureOneAuth can approve DeepSeek Admin sign-in (relying party 9, deepseek.aml.one).
- FeaturePull down the Home vault to search accounts live, then tap clear to close the field
- FeatureHome splits cards into Logins and Admin access, each in alphabetical order
- FeatureHidden codes show an eye on each card so you can peek at one for 5 seconds
- ImprovementScan-to-sign-in shows the camera as soon as the lens is ready, instead of waiting extra seconds
- ImprovementScan result messages sit under the title so they stay visible above your hands
- ImprovementApprove sign-in fits on one screen, with a compact service row and Approve pinned in reach
- ImprovementHome vault has a richer pearl-glass look for codes, the empty state, and Scan
- ImprovementHome account cards sit tighter with smaller codes
- ImprovementThe secured-accounts note sits under the vault list, and Home leaves space under the header without a hairline
- ImprovementScan on Home is a glass jewel with a cyan sweep and the QR scanner icon
- ImprovementScan to sign-in uses a square camera frame around the ring, without a shadow line above it
- ImprovementAdmin Sign in with OneAuth mints a fresh 60-second code at tap, so a page left open does not expire before you approve.
- ImprovementDevice-link circular codes use the same glare sweep as other AmL codes, with a pause so a phone can scan.
- ImprovementDevice-link and admin enrollment keep the circle in place while a new code loads, so the screen no longer jumps
- ImprovementHome countdown rings shrink smoothly through the 30 seconds instead of jumping once a second
- ImprovementAccount card accent color follows the rounded left corners
- ImprovementHome card accents fade out on the corner before the top and bottom edges
- BugfixFlinging the Home list to the top no longer opens search — pull down with your finger, like refresh
- BugfixOneAuth Admin sign-in no longer rejects a valid approve after the auth database split.
- FeatureOneAuth trusts AB Desktop Admin (relying party 8) at desktop.aml.one for machine allowlist sign-in.
- Improvementauth.aml.one now runs on the dedicated OneAuth API (port 3021) instead of the MessageMe server — deploy with `deploy-oneauth-server.ps1`.
- ImprovementSettings opens with the AmL hummingbird logo and your installed version at the top.
- ImprovementLoading states across the app now use the family hummingbird animation instead of a generic spinner.
- BugfixApp Builder v4 sign-in is trusted at compile time, so approving a v4 circle no longer depends on syncing the relying-party directory first.
- BugfixApp Builder v4 sign-in recognizes TOTP accounts enrolled under the older AppBuilder and App Builder 2 issuer names.
- BugfixOneAuth refreshes the signed relying-party directory before rejecting an unknown scan-login site, so v4 works even on builds that predate the compile-time allowlist entry.
- FeatureSign in to the OneAuth admin console on auth.aml.one and trust new AmL apps from the signed family directory
- ImprovementAdd space above the match-code question on Approve sign-in
- FeatureOneAuth can approve sign-in for VersionControl at versioncontrol.aml.one
- BugfixAfter approving a sign-in opened from another AmL app, OneAuth returns to that app instead of hiding both
Windows
| Label | Version | Build | Date | Size | Notes | Download |
|---|---|---|---|---|---|---|
| v1.2.8-260908 Latest | 1.2.8 | 10208 | 2026-09-08 | 15.9 MB | Download | |
| v1.2.7-260906 | 1.2.7 | 10207 | 2026-09-06 | 15.9 MB | Download | |
| v1.2.6-260906 | 1.2.6 | 10206 | 2026-09-06 | 15.9 MB | Download | |
| v1.2.5-260828 | 1.2.5 | 10205 | 2026-08-28 | 14.9 MB | Download | |
| v1.2.3-260817 | 1.2.3 | 10203 | 2026-08-17 | 14.8 MB | Download |
Show 2 older releases
- ImprovementOneAuth stays in portrait on phones, including Ubuntu Touch
- ImprovementTap the eye on a hidden code again to hide it, instead of waiting five seconds
- BugfixHide authentication codes and Lock when app leaves foreground now stay on after you leave Settings
- BugfixApproving App Builder sign-in after linking a new OneAuth no longer shows a raw "Bad state" error when this phone is missing the original sign-in key.
- FeatureOneAuth can approve DeepSeek Admin sign-in (relying party 9, deepseek.aml.one).
- FeaturePull down the Home vault to search accounts live, then tap clear to close the field
- FeatureHome splits cards into Logins and Admin access, each in alphabetical order
- FeatureHidden codes show an eye on each card so you can peek at one for 5 seconds
- ImprovementScan-to-sign-in shows the camera as soon as the lens is ready, instead of waiting extra seconds
- ImprovementScan result messages sit under the title so they stay visible above your hands
- ImprovementApprove sign-in fits on one screen, with a compact service row and Approve pinned in reach
- ImprovementHome vault has a richer pearl-glass look for codes, the empty state, and Scan
- ImprovementHome account cards sit tighter with smaller codes
- ImprovementThe secured-accounts note sits under the vault list, and Home leaves space under the header without a hairline
- ImprovementScan on Home is a glass jewel with a cyan sweep and the QR scanner icon
- ImprovementScan to sign-in uses a square camera frame around the ring, without a shadow line above it
- ImprovementAdmin Sign in with OneAuth mints a fresh 60-second code at tap, so a page left open does not expire before you approve.
- ImprovementDevice-link circular codes use the same glare sweep as other AmL codes, with a pause so a phone can scan.
- ImprovementDevice-link and admin enrollment keep the circle in place while a new code loads, so the screen no longer jumps
- ImprovementHome countdown rings shrink smoothly through the 30 seconds instead of jumping once a second
- ImprovementAccount card accent color follows the rounded left corners
- ImprovementHome card accents fade out on the corner before the top and bottom edges
- BugfixFlinging the Home list to the top no longer opens search — pull down with your finger, like refresh
- BugfixOneAuth Admin sign-in no longer rejects a valid approve after the auth database split.
- FeatureOneAuth trusts AB Desktop Admin (relying party 8) at desktop.aml.one for machine allowlist sign-in.
- Improvementauth.aml.one now runs on the dedicated OneAuth API (port 3021) instead of the MessageMe server — deploy with `deploy-oneauth-server.ps1`.
- FeatureSign in to the OneAuth admin console on auth.aml.one and trust new AmL apps from the signed family directory
- ImprovementAdd space above the match-code question on Approve sign-in
- FeatureOneAuth can approve sign-in for VersionControl at versioncontrol.aml.one
- BugfixAfter approving a sign-in opened from another AmL app, OneAuth returns to that app instead of hiding both
- FeatureAmL One sign-in — scan an invite circular code to approve the family App Store
- BugfixApproving a sign-in from App Builder 2 returns to that app instead of the home screen or a stuck OneAuth window
macOS
| Label | Version | Build | Date | Size | Notes | Download |
|---|---|---|---|---|---|---|
| v1.2.8-260908 Latest | 1.2.8 | 10208 | 2026-09-08 | 24 MB | Download | |
| v1.2.7-260906 | 1.2.7 | 10207 | 2026-09-06 | 24 MB | Download | |
| v1.2.6-260906 | 1.2.6 | 10206 | 2026-09-06 | 24 MB | Download | |
| v1.2.5-260829 | 1.2.5 | 10205 | 2026-08-28 | 23 MB | Download | |
| v1.2.3-260817 | 1.2.3 | 10203 | 2026-08-17 | 22.9 MB | Download |
- ImprovementOneAuth stays in portrait on phones, including Ubuntu Touch
- ImprovementTap the eye on a hidden code again to hide it, instead of waiting five seconds
- BugfixHide authentication codes and Lock when app leaves foreground now stay on after you leave Settings
- BugfixApproving App Builder sign-in after linking a new OneAuth no longer shows a raw "Bad state" error when this phone is missing the original sign-in key.
- FeatureOneAuth can approve DeepSeek Admin sign-in (relying party 9, deepseek.aml.one).
- FeaturePull down the Home vault to search accounts live, then tap clear to close the field
- FeatureHome splits cards into Logins and Admin access, each in alphabetical order
- FeatureHidden codes show an eye on each card so you can peek at one for 5 seconds
- ImprovementScan-to-sign-in shows the camera as soon as the lens is ready, instead of waiting extra seconds
- ImprovementScan result messages sit under the title so they stay visible above your hands
- ImprovementApprove sign-in fits on one screen, with a compact service row and Approve pinned in reach
- ImprovementHome vault has a richer pearl-glass look for codes, the empty state, and Scan
- ImprovementHome account cards sit tighter with smaller codes
- ImprovementThe secured-accounts note sits under the vault list, and Home leaves space under the header without a hairline
- ImprovementScan on Home is a glass jewel with a cyan sweep and the QR scanner icon
- ImprovementScan to sign-in uses a square camera frame around the ring, without a shadow line above it
- ImprovementAdmin Sign in with OneAuth mints a fresh 60-second code at tap, so a page left open does not expire before you approve.
- ImprovementDevice-link circular codes use the same glare sweep as other AmL codes, with a pause so a phone can scan.
- ImprovementDevice-link and admin enrollment keep the circle in place while a new code loads, so the screen no longer jumps
- ImprovementHome countdown rings shrink smoothly through the 30 seconds instead of jumping once a second
- ImprovementAccount card accent color follows the rounded left corners
- ImprovementHome card accents fade out on the corner before the top and bottom edges
- BugfixFlinging the Home list to the top no longer opens search — pull down with your finger, like refresh
- BugfixOneAuth Admin sign-in no longer rejects a valid approve after the auth database split.
- FeatureOneAuth trusts AB Desktop Admin (relying party 8) at desktop.aml.one for machine allowlist sign-in.
- Improvementauth.aml.one now runs on the dedicated OneAuth API (port 3021) instead of the MessageMe server — deploy with `deploy-oneauth-server.ps1`.
- FeatureSign in to the OneAuth admin console on auth.aml.one and trust new AmL apps from the signed family directory
- ImprovementAdd space above the match-code question on Approve sign-in
Linux
| Label | Version | Build | Date | Size | Notes | Download |
|---|---|---|---|---|---|---|
| v1.2.8-260908 Latest | 1.2.8 | 10208 | 2026-09-08 | 14.4 MB | Download | |
| v1.2.7-260906 | 1.2.7 | 10207 | 2026-09-06 | 14.4 MB | Download | |
| v1.2.6-260906 | 1.2.6 | 10206 | 2026-09-06 | 14.4 MB | Download | |
| v1.2.5-260829 | 1.2.5 | 10205 | 2026-08-28 | 13.4 MB | Download | |
| v1.2.3-260817 | 1.2.3 | 10203 | 2026-08-17 | 13.3 MB | Download |
Show 2 older releases
- ImprovementOneAuth stays in portrait on phones, including Ubuntu Touch
- ImprovementTap the eye on a hidden code again to hide it, instead of waiting five seconds
- BugfixHide authentication codes and Lock when app leaves foreground now stay on after you leave Settings
- BugfixApproving App Builder sign-in after linking a new OneAuth no longer shows a raw "Bad state" error when this phone is missing the original sign-in key.
- FeatureOneAuth can approve DeepSeek Admin sign-in (relying party 9, deepseek.aml.one).
- FeaturePull down the Home vault to search accounts live, then tap clear to close the field
- FeatureHome splits cards into Logins and Admin access, each in alphabetical order
- FeatureHidden codes show an eye on each card so you can peek at one for 5 seconds
- ImprovementScan-to-sign-in shows the camera as soon as the lens is ready, instead of waiting extra seconds
- ImprovementScan result messages sit under the title so they stay visible above your hands
- ImprovementApprove sign-in fits on one screen, with a compact service row and Approve pinned in reach
- ImprovementHome vault has a richer pearl-glass look for codes, the empty state, and Scan
- ImprovementHome account cards sit tighter with smaller codes
- ImprovementThe secured-accounts note sits under the vault list, and Home leaves space under the header without a hairline
- ImprovementScan on Home is a glass jewel with a cyan sweep and the QR scanner icon
- ImprovementScan to sign-in uses a square camera frame around the ring, without a shadow line above it
- ImprovementAdmin Sign in with OneAuth mints a fresh 60-second code at tap, so a page left open does not expire before you approve.
- ImprovementDevice-link circular codes use the same glare sweep as other AmL codes, with a pause so a phone can scan.
- ImprovementDevice-link and admin enrollment keep the circle in place while a new code loads, so the screen no longer jumps
- ImprovementHome countdown rings shrink smoothly through the 30 seconds instead of jumping once a second
- ImprovementAccount card accent color follows the rounded left corners
- ImprovementHome card accents fade out on the corner before the top and bottom edges
- BugfixFlinging the Home list to the top no longer opens search — pull down with your finger, like refresh
- BugfixOneAuth Admin sign-in no longer rejects a valid approve after the auth database split.
- FeatureOneAuth trusts AB Desktop Admin (relying party 8) at desktop.aml.one for machine allowlist sign-in.
- Improvementauth.aml.one now runs on the dedicated OneAuth API (port 3021) instead of the MessageMe server — deploy with `deploy-oneauth-server.ps1`.
- FeatureSign in to the OneAuth admin console on auth.aml.one and trust new AmL apps from the signed family directory
- ImprovementAdd space above the match-code question on Approve sign-in
- FeatureOneAuth can approve sign-in for VersionControl at versioncontrol.aml.one
- BugfixAfter approving a sign-in opened from another AmL app, OneAuth returns to that app instead of hiding both
- FeatureAmL One sign-in — scan an invite circular code to approve the family App Store
- BugfixApproving a sign-in from App Builder 2 returns to that app instead of the home screen or a stuck OneAuth window
Ubuntu Touch
| Label | Version | Build | Date | Size | Notes | Download |
|---|---|---|---|---|---|---|
| v1.2.8-260908 Latest | 1.2.8 | 10208 | 2026-09-08 | 14 MB | Download | |
| v1.2.7-260906 | 1.2.7 | 10207 | 2026-09-06 | 14 MB | Download | |
| v1.2.6-260906 | 1.2.6 | 10206 | 2026-09-06 | 14 MB | Download | |
| v1.2.5-260828 | 1.2.5 | 10205 | 2026-08-28 | 12.9 MB | Download | |
| v1.2.3-260817 | 1.2.3 | 10203 | 2026-08-17 | 12.8 MB | Download |
Show 2 older releases
OneAuth
Private cross-platform authenticator in AmL One World, with separate packages for each operating system.
- Install the package for your device, then keep your old authenticator until every account is verified.
- Store account recovery codes separately; never send authenticator secrets through chat or email.
- See auth.aml.one/docs for setup and transfer guidance.
- ImprovementOneAuth stays in portrait on phones, including Ubuntu Touch
- ImprovementTap the eye on a hidden code again to hide it, instead of waiting five seconds
- BugfixHide authentication codes and Lock when app leaves foreground now stay on after you leave Settings
- BugfixApproving App Builder sign-in after linking a new OneAuth no longer shows a raw "Bad state" error when this phone is missing the original sign-in key.
- FeatureOneAuth can approve DeepSeek Admin sign-in (relying party 9, deepseek.aml.one).
- FeaturePull down the Home vault to search accounts live, then tap clear to close the field
- FeatureHome splits cards into Logins and Admin access, each in alphabetical order
- FeatureHidden codes show an eye on each card so you can peek at one for 5 seconds
- ImprovementScan-to-sign-in shows the camera as soon as the lens is ready, instead of waiting extra seconds
- ImprovementScan result messages sit under the title so they stay visible above your hands
- ImprovementApprove sign-in fits on one screen, with a compact service row and Approve pinned in reach
- ImprovementHome vault has a richer pearl-glass look for codes, the empty state, and Scan
- ImprovementHome account cards sit tighter with smaller codes
- ImprovementThe secured-accounts note sits under the vault list, and Home leaves space under the header without a hairline
- ImprovementScan on Home is a glass jewel with a cyan sweep and the QR scanner icon
- ImprovementScan to sign-in uses a square camera frame around the ring, without a shadow line above it
- ImprovementAdmin Sign in with OneAuth mints a fresh 60-second code at tap, so a page left open does not expire before you approve.
- ImprovementDevice-link circular codes use the same glare sweep as other AmL codes, with a pause so a phone can scan.
- ImprovementDevice-link and admin enrollment keep the circle in place while a new code loads, so the screen no longer jumps
- ImprovementHome countdown rings shrink smoothly through the 30 seconds instead of jumping once a second
- ImprovementAccount card accent color follows the rounded left corners
- ImprovementHome card accents fade out on the corner before the top and bottom edges
- BugfixFlinging the Home list to the top no longer opens search — pull down with your finger, like refresh
- BugfixOneAuth Admin sign-in no longer rejects a valid approve after the auth database split.
- FeatureOneAuth trusts AB Desktop Admin (relying party 8) at desktop.aml.one for machine allowlist sign-in.
- Improvementauth.aml.one now runs on the dedicated OneAuth API (port 3021) instead of the MessageMe server — deploy with `deploy-oneauth-server.ps1`.
- FeatureSign in to the OneAuth admin console on auth.aml.one and trust new AmL apps from the signed family directory
- ImprovementAdd space above the match-code question on Approve sign-in
- FeatureAmL One sign-in — scan an invite circular code to approve the family App Store
- BugfixApproving a sign-in from App Builder 2 returns to that app instead of the home screen or a stuck OneAuth window
- FeatureTrust App Builder 2 at appbuilder2.aml.one, with its own OneAuth account name