diff --git a/docs/.vuepress/config.js b/docs/.vuepress/config.js index c0ad01e..05bff57 100644 --- a/docs/.vuepress/config.js +++ b/docs/.vuepress/config.js @@ -68,7 +68,8 @@ module.exports = { 'slow-redirect-token', 'sql-server-token', 'wireguard-token', - 'kubeconfig-token' + 'kubeconfig-token', + 'fake-app-token', ] } ] diff --git a/docs/guide/fake-app-token.md b/docs/guide/fake-app-token.md new file mode 100644 index 0000000..90c2b29 --- /dev/null +++ b/docs/guide/fake-app-token.md @@ -0,0 +1,21 @@ +# Fake App Canarytoken + +## What is a Fake App Canarytoken + +This Canarytoken works by being installed on your device as a Progressive Web App (PWA) disguised as a normal app. When the app is opened, the Canarytoken sends an alert. + +If you allow location access, then the alert will contain the device's location when the app was opened. + +## Creating the Canarytoken + +Create a Canarytoken by choosing "Fake App" from the Canarytokens list. + +Select the icon you want to use for the app. + +Leave a reasonable comment to remind yourself where you will deploy the Canarytoken (e.g. "Fake PayPal app on Alice's phone"). + +Tap the "Get Fake App Canarytoken" button and follow the installation procedure for your platform. + +## Where to tokenize + +A few ideas for use include: thwarting scammers with a fake banking app, catching someone snooping on your phone with a fake password manager / email app, or covertly sending your current location to someone.