Tap it.
Know it.
No guessing which card is which. Scan whatever card or fob you pick up. GHOSTkey checks its enrolled public reference, shows the correct record, then gives you the actions that are actually safe.
Which device is this?
Put the cards down in any order. Pick one up, hold it to your Android phone, and tap Scan.
No card selected
The app will identify registered cards automatically.
One new random reference. Never a password, recovery seed, or FIDO key.
Your device fleet.
Scan in any sequence. Each enrolled public ID resolves to its own registered slot; unknown, revoked and blank records are not assigned automatically.
Every tap has a trail.
One registered reference, many independent observations. Repeated scans are retained; UID changes and mismatches are flagged for review. All evidence stays in this browser unless you export it.
Local SHA-256 hash chaining helps identify later changes to an exported file. It is not digitally signed, independently timestamped, backed up to a trusted evidence server, or proof of physical card authenticity. Maximum 1,000 observations per local browser journal; export before capacity is reached.
Five devices. Different jobs.
Compare the three white cards, the blue fob and the future Ghost USB device without confusing a copyable tag, a FIDO2 authenticator and encrypted storage.
| HARDWARE | ASSIGNED ROLE | IDENTITY / STORAGE | SECURITY PROOF | STATE |
|---|
One product. Two very different capabilities.
A USB storage drive can carry an encrypted vault backup. A FIDO2 security key can sign an origin-bound authentication challenge. A single device only performs both if its actual hardware and firmware support both.
USB hardware not verified. No backup restore or FIDO2 credential enrollment confirmed.
Use NFC Tools as a fallback.
For the blue MIFARE fob or an external reader, inspect the technology there. You can paste a GHOSTkey public reference only to compare it against your registry. Manual input is labeled unverified and cannot enroll, rekey, or approve a login.
This will not mark a physical tap as verified.