Mobile Sync, Vault & Auth
How the mobile app stays in lock-step with the desktop — encryption, real-time sync, biometrics, and 2FA.
Real-time Sync
The mobile app maintains a Reverb WebSocket connection to vortexhq.dev. Tasks, test emails, and Nexus updates push instantly. Pull-to-refresh forces a re-sync if needed.
End-to-end encrypted vault
- Vault unlock uses Argon2id — no plaintext password ever leaves the device.
- Biometric unlock (Face ID, Touch ID, fingerprint) wraps the vault key in the OS secure enclave.
- Items decrypted on demand; the in-memory key is wiped after a configurable idle timeout.
Authentication
- Email + password sign-in.
- Social login (Google, GitHub, Apple) via in-app webview.
- Two-factor authentication enforced if enabled on your account.
Offline-friendly
Cached data (tasks, recent emails, SSH host list) is available offline. Mutations queue locally and replay once you're back online.