Question 1

What is Champa Auth?

Accepted Answer

An authenticator app for iOS, Android, Mac and Windows. It makes time-based one-time codes on your device, for any service you add with a standard QR code or key, or for an organisation that enrols its people through verified account setup.

Question 2

Does the server see my codes or secrets?

Accepted Answer

No. Codes are computed on the device and are not sent. Secrets sit in an encrypted vault whose key is held in the system secure storage. Adding an account checks only the issuer name, never the QR payload. Optional sync stores an encrypted blob the server cannot read.

Question 3

Does it work offline?

Accepted Answer

Quick Setup works on the device without the service. Verified account setup needs the service while you enrol.

Question 4

Which devices are supported?

Accepted Answer

macOS 13 or later, Windows 10 and 11, Android 8.0 or later and iOS 16 or later. A download button is active only once the app for that platform is published; until then it says we are coming soon.

Question 5

How does SogdoVerify use Champa Auth?

Accepted Answer

As a second factor for sign-in and for step-up on sensitive actions, such as switching a workspace to Real, KYC decisions and emergency stops. If the provider cannot be reached, sign-in fails closed instead of skipping the factor.

Question 6

Does it support push approval, passkeys or backup codes?

Accepted Answer

Not today. The apps are code based: you read the current code and type it in. There is no push-to-approve, WebAuthn, backup-code or SAML and OIDC sign-in.

Question 7

What does it cost?

Accepted Answer

Quick Setup needs no organisation. Organisation features (issuer codes, enrolment, the admin portal) follow an organisation subscription. Talk to us for the current terms.