Codes generated on your device
Verification codes are calculated locally using the TOTP standard. Nothing is sent to a server to produce them.
authentication
Secure every account with codes that work offline
authentication generates the six-digit verification codes you need to sign in to accounts protected by two-factor authentication. Each is calculated on your phone using the TOTP standard, so a stolen password alone is not enough to reach your account.
No account required · Works offline
Works with the services you already use
- Microsoft
- Amazon
- GitHub
- Discord
- Dropbox
authentication is an independent app. It is not affiliated with, endorsed by, or sponsored by any of the services listed above. All product names, logos and trademarks are the property of their respective owners and are shown only to indicate compatibility with their standard TOTP two-factor authentication.
Capabilities
Everything you need to stay protected
A simple, privacy-first two-factor app you can rely on to keep every account safe.
Quick QR setup
Add an account in seconds by scanning the QR code a service shows you. A setup key can also be typed by hand.
Fingerprint & Face unlock
Hold your codes behind your device's biometric check. The check is done by the operating system; the app sees only the result.
Encrypted backup
Optional and off by default. Switch it on and your accounts can be restored on a new phone instead of re-added one by one.
Works without internet
Codes depend on the clock, not the network, so the app keeps working on a plane, abroad, or with no signal.
Search & organise
Find any account by name once you have more than a screenful saved.
Getting started
Set up protection in three steps
From install to secured in about a minute — no sign-up.
1
Install the app
Download authentication and open it. There is no registration step and no account to create.
2
Scan a QR code
In a service's security settings, choose the authenticator-app option and scan the code it shows.
3
Sign in securely
Enter the six-digit code at login and you are protected. It changes every thirty seconds.
Keep the recovery codes a service gives you when you turn on two-factor authentication — they are how you get back in if you lose the phone and have not enabled backup.
The experience
Clear, fast, and built to get out of your way
A focused interface that surfaces the right code at the right moment — nothing more.
- Tap to copyCodes land on your clipboard in one touch instead of being retyped.
- Privacy modeKeep codes hidden until you need them — useful in shared spaces.
- Works with standard 2FACompatible with any service offering authenticator-app two-factor authentication.
- No trackingThe list of accounts you protect is not collected, shared, or sold.
Data & permissions
What we ask for, and exactly why
authentication is built to work without knowing who you are. Here is what stays on your device, what leaves it, and why each permission is requested.
Secrets stay on your device
The setup keys behind your codes are stored encrypted on your phone. They are never transmitted in plain text and do not reach our servers — unless you deliberately switch on the optional encrypted backup.
Never leaves the deviceNo account, no personal data
The app needs no sign-up. We do not ask for your name, email address, phone number or contacts, and it never requests access to the accounts you protect with it.
Not collectedLimited technical diagnostics
To keep the app stable we may collect non-identifying information such as device model, OS version and crash reports. We do not sell your data.
Anonymous onlyPermissions the app requests
Each is asked for in context, used for one purpose, and nothing more.
- Camera
Requested only when you add an account, so the app can scan the QR code a service shows you. No photo or video is recorded, stored or uploaded.
- Fingerprint & Face unlock
Handled entirely by your device's biometric system. The app receives only a pass or fail result — your biometric data never reaches us.
- Storage
Used only if you enable encrypted backup, so the app can write and restore the backup file. Nothing else on your device is read.
- Internet
Used for crash diagnostics, and for backup if you turn it on. Your codes are generated offline and never need a connection.
The full detail — retention, third-party services, children's privacy and your rights — is in our policy. Questions go straight to us.
Support
Frequently asked questions
Everything you might want to know before getting started.
It adds a second layer to your logins. Alongside your password you enter a short code the app generates fresh every thirty seconds — so a stolen password alone is not enough for an attacker to get in.
Yes. Codes are generated locally on your device using the standard TOTP algorithm, so you can sign in with no signal or Wi-Fi.
With encrypted backup enabled, restore your accounts on the new device. Without it, use the recovery codes each service gave you when you turned on two-factor authentication — which is why those are worth keeping somewhere safe.
Any site or app that supports authenticator-based two-factor authentication, including Google, Microsoft, Instagram, Amazon, GitHub and Discord. If it can show a QR code, it works.
TODO: confirm this against the store listing, and state plainly here whether the app shows advertising or offers a paid tier.
Secure your accounts today
Turn on two-factor authentication for the accounts that matter most. It takes about a minute each.