Fistbump & WhisperFistbump & Whisper
Your two-factor codes, and your passwords. Two apps, on every device you own, encrypted so that only you can read them.
Get the appsWhy two apps and not one
Because one unlock should not open both.
A second factor exists so that somebody who has your password still cannot get in. Keep the password and the code in one vault behind one sign-in and you have quietly undone that. Fistbump and Whisper have separate vaults, separate passkeys and separate sign-ins — you sign into each.
They still feel like one thing.
The browser companion fills a password from Whisper and a code from Fistbump in the same flow. You sign in to Whisper in the companion itself; Fistbump stays a separate sign-in, so your passwords and your codes never open with one unlock.
We cannot read either of them.
Everything is encrypted on your device before it is stored. Our servers hold a blob they have no key for, and there is no code path that would accept one — not a promise about what we would do, a fact about what we can do.
Fiducia Fistbump
The authenticator
Your two-factor codes, on every device you own. Sign in with a passkey — no password to forget. Works with your bank and your email as readily as with Fiducia.
- iPhone & iPad
- Android
- macOS
- Windows
- LinuxHow to install
Verify your download
Compare the SHA-256 of the file you downloaded with the value here before you run it.
- Android
- 03d61ce5f792d6f16ecb7015924580d4df2409a6773596353074553ba389e827
- macOS
- dad3871c853dac9b5558dfd89826454d693647b3e725347cd4523f59369e434e
- Linux
- 642cff503a9a8e0eae9ca006bae1041abe24bf54176ce65d53a47cb8097a1d8c
Or use it in your browser — nothing to install.
Fiducia Whisper
The password manager
Your logins, encrypted and in one place. Fill them straight from the browser. A separate app from Fistbump on purpose — so your passwords and your codes never open with one unlock.
- iPhone & iPad
- Android
- macOS
- Windows
- LinuxHow to install
Verify your download
Compare the SHA-256 of the file you downloaded with the value here before you run it.
- Android
- 9cae04d78a5ed52ee34b2321fd482889926da31ef2168c10e718f55c932e5530
- macOS
- 2c87fa95821fbdbf7691506dcc3baea42dcb908b18b419c12637c6acf7a9034d
- Linux
- 08001fd3036e837115248180f40601d68f4ef70ad3e209a9e691e50ea40eb5cf
Or use it in your browser — nothing to install.
Browser companion
Both apps, one flow
Sign in to Whisper in the companion itself and fill passwords straight from the browser — no app needs to be open, and your master password never leaves the extension. Codes still come from an open Fistbump, which stays a separate sign-in on purpose.
Verify your download
Compare the SHA-256 of the file you downloaded with the value here before you run it.
- Chrome
- 12ab410842e8ac15f43c783b23308a33e8ec1f857871d83d4744f6bd8e17189d
- Edge
- 12ab410842e8ac15f43c783b23308a33e8ec1f857871d83d4744f6bd8e17189d
- Firefox
- 3d0ee48a205308345b9ad3027760b2a8c64bb637d9a469403439cad6b14e4163