CanarytokensCanarytokens
Home
Guide
Create
GitHub
Home
Guide
Create
GitHub
  • Create
  • Guide

    • Introduction
    • Getting Started
  • Examples

    • How to use the examples
    • Adobe PDF Canarytoken
    • AWS API Keys Canarytoken
    • AWS Infrastructure Canarytoken
    • Azure Entra ID login token
    • Azure Login Certificate Canarytoken
    • Cloned Website Canarytoken
    • Credit Card Canarytoken
    • CrowdStrike Client Credential Canarytoken
    • CSS Cloned Website Canarytoken
    • Custom EXE Canarytoken
    • DNS Canarytoken
    • Fake App Canarytoken
    • HTTP Canarytoken
    • Fake IdP SAML App Canarytoken
    • Kubeconfig Token
    • Log4shell Canarytoken
    • MS Excel Canarytoken
    • MS Word Canarytoken
    • MySQL Dump Canarytoken
    • Network Folder Canarytoken
    • QR Code Canarytoken
    • Fast Redirect Canarytoken
    • Slow Redirect Canarytoken
    • Sensitive Command Canarytoken
    • SQL Server Canarytoken
    • SVG Canarytoken
    • SVN Canarytoken
    • Unique email address Canarytoken
    • Web Image Canarytoken
    • Windows Directory Canarytoken
    • WireGuard Canarytoken

Fake App Canarytoken

What is a Fake App Canarytoken

This Canarytoken works by being installed on your device as a Progressive Web App (PWA) disguised as a normal app. When the app is opened, the Canarytoken sends an alert.

If you allow location access, then the alert will contain the device's location when the app was opened.

Creating the Canarytoken

Note

We currently only support Safari and Google Chrome.

Create a Canarytoken by choosing "Fake App" from the Canarytokens list.

Select the icon you want to use for the app.

Leave a reasonable comment to remind yourself where you will deploy the Canarytoken (e.g. "Fake PayPal app on Alice's phone").

Tap the "Get Fake App Canarytoken" button and follow the installation procedure for your platform.

Where to tokenize

A few ideas for use include: thwarting scammers with a fake banking app, catching someone snooping on your phone with a fake password manager / email app, or covertly sending your current location to someone.

Help us improve this page!
Last Updated: 8/6/24, 12:14 PM
Prev
DNS Canarytoken
Next
HTTP Canarytoken