2FA for your filesystem
Free & open source

Two-factor security
for your files

Monban encrypts your folders and individual files with AES-256-GCM on macOS and Linux, unlocked only by security key PIN + touch. No drivers, no kernel extensions, nothing to configure.

Features

Why Monban

Hardware-bound encryption for folders and files on macOS and Linux. No cloud, no passwords to forget.

PIN + touch
Unlocking requires your security key PIN and a physical touch. The secret never leaves the hardware -- the protection is real encryption, not just a hidden folder.
macOS and Linux
Works natively on macOS (Apple Silicon & Intel) and Linux. No macFUSE, no kernel extensions, no Recovery Mode reboots.
Multi-key backup
Register multiple security keys per vault. Lose one, use the other. Your master secret is wrapped independently per key via FIDO2 hmac-secret.
Auto-lock
Vaults lock automatically on sleep, logout, app quit, key removal, and SIGTERM. No chance of leaving files exposed by accident.
Metadata protection
Manifests are encrypted. Original filenames and directory structure are not visible when locked.
Crash-safe
A write-ahead journal ensures files are never lost during lock or unlock, even on power failure. Streaming 64KB chunks keep memory usage low.
Compatible Hardware

Works with

Any FIDO2 security key with hmac-secret support.

Yubico YubiKey
Google Google Titan
image/svg+xml Nitrokey
CanoKey
Yubico YubiKey
Google Google Titan
image/svg+xml Nitrokey
CanoKey
Yubico YubiKey
Google Google Titan
image/svg+xml Nitrokey
CanoKey
Yubico YubiKey
Google Google Titan
image/svg+xml Nitrokey
CanoKey
Setup

2FA in three steps

1

Enroll your security key

Open Monban, plug in your key, and tap to enroll it as your second factor. Add backup keys anytime.

2

Add folders or files

Select folders or individual files to protect. Monban encrypts everything in place with AES-256-GCM.

3

PIN + touch to unlock

Enter your PIN and touch your security key to decrypt. Pull the key out and everything locks instantly.

Demo

See it in action

Watch how Monban protects your files, locks your screen, and gates privilege escalation.

Encrypt & lock

Encrypt files with a tap, pull the key to lock

Force authentication

Full-screen kiosk lock when the key is removed

Sudo gate

Require PIN + touch for privilege escalation