2FA iAtomos: Authenticator

2FA iAtomos generates your two-factor codes on the phone itself. No account, no connection, no tracking. Your 2FA secrets live in a vault encrypted on the device with AES-256-GCM. The key is held by the iOS Keychain. Nothing leaves the phone unless you decide it should. ENCRYPTED CLOUD BACKUP, IF YOU WANT IT Turn it on and the app uploads an encrypted copy whenever your vault changes. Encryption happens on your device with a random data key, and that key is wrapped with one derived from a password you choose using Argon2id. The password and the unwrapped key are never sent to the server. Restoring is always an explicit action. A wrong password, an altered copy or a version conflict leaves your local vault untouched. Revision checks stop an out-of-date installation from overwriting a newer copy. This is a backup, not two-way sync, and it says so. AN INDEPENDENT ENCRYPTED FILE Export a password-protected file whenever you like. It does not depend on the cloud backup or on any account, so you always have a second way back. WHAT IT DOES • Standard 2FA codes (TOTP, RFC 6238) with SHA-1, SHA-256 and SHA-512, 6 or 8 digits • Scan a QR code, import a Google Authenticator export, or type the secret • Face ID or Touch ID lock, with the device passcode as fallback • Favorites, search and a custom order • The service's own period is respected, never stretched to buy time • English, Spanish, Catalan, German, French, Italian, Portuguese, Japanese, Korean, Chinese (Simplified) and Russian BUILT FOR EVERYONE The app follows your iOS accessibility settings rather than fighting them. Larger Text grows the code instead of shrinking it, Increase Contrast switches to a high-contrast palette, Reduce Motion stops the countdown animating, and Bold Text and Smart Invert are honored. With VoiceOver, every code can be read out digit by digit and copied, starred or deleted through rotor actions. Time remaining is available on demand, so nothing interrupts you mid-code. Urgency is never signaled by color alone. WHAT IT DOES NOT DO • No ads • No data selling • No behavioral tracking • No secrets, account names or generated codes in any log or report The optional account uses Firebase Authentication and, if you choose it, Google or Apple sign-in. Those SDKs process account identifiers and diagnostic data, and the privacy policy says exactly what and when. The security model is written down, not implied. Read the privacy policy and its security limits at 2fa.iatomos.com.