Keya Authenticator

Your passwords alone aren't enough. Every account worth protecting deserves a second lock that never phones home. Keya Authenticator generates secure one-time codes for any site that supports two-factor authentication. No account to create. No server to trust. No subscription to cancel. PRIVATE BY DESIGN Every secret you add stays in the iOS Keychain is encrypted, locked to your device, invisible when the screen is off. Keya Authenticator has zero network entitlements. It physically cannot connect to the internet. NEVER RACE THE CLOCK Most authenticators leave you scrambling when a code is about to expire. Keya shows you the next code before the current one runs out so you always have time to type it in. BIOMETRIC UNLOCK Protect your codes with Face ID or Touch ID. A PIN fallback is always available, with automatic lockout after repeated wrong attempts. EASY TO SWITCH Moving from another app is painless. Import directly from Google Authenticator, Aegis, 2FAS, Raivo, andOTP, and LastPass - or scan any standard QR code. ENCRYPTED BACKUPS Export your entire vault as an AES-256-GCM encrypted backup. Store it anywhere you like since no cloud account required. OPEN SOURCE Every line of code is publicly available on GitHub under the GPL v3 licence. Read it, audit it, build it yourself. Trust through transparency. FREE. FOREVER. No ads. No subscription. No freemium tricks. All features are available from day one. A voluntary tip jar is the only way to support development and it is entirely optional. WORKS WITH EVERYTHING Google, GitHub, Apple, Microsoft, Dropbox, Amazon, Discord, and hundreds more - any service that supports TOTP (RFC 6238) or HOTP (RFC 4226).