TwoFac vs Keylet

Your two-factor codes. Private, secure, always available. TwoFac is an offline authenticator that keeps your one-time passwords exactly where they belong — on your device. No account to create, no server to trust, no subscription to manage. Just your codes, ready when you need them. PRIVATE BY DESIGN Every secret is encrypted and stored locally using your device's secure storage. TwoFac has no backend, no analytics, and no data collection of any kind. Your codes never leave your phone unless you explicitly export a backup. SIMPLE TO USE • Scan a QR code to add any TOTP account in seconds • Enter codes manually with full field validation • Copy any token with a single tap • See exactly how long your code is valid with a live countdown • Organize accounts into folders to keep things tidy BACKUP WHEN YOU WANT Export an encrypted backup file protected by a password you choose. Save it to iCloud Drive, share it to Files, or keep it anywhere you like. Restore it on any device running TwoFac. Your backup, your rules. SECURE AT REST • Secrets encrypted with AES-GCM on-device • Optional biometric app lock (Face ID / Touch ID) • Automatic re-lock after a configurable timeout • Screenshot prevention in the app switcher COMPATIBLE WITH EVERYTHING TwoFac works with any service that supports TOTP (RFC 6238): Google, GitHub, Dropbox, Notion, Stripe, Amazon, Cloudflare, Twitter, Discord, and thousands more. FREE. ALWAYS. TwoFac is and will always be free to use. No ads. No in-app purchases. No premium tier. If you find it useful, a small donation keeps the project alive — but there's no obligation whatsoever. SUPPORTS TOTP / RFC 6238 · SHA-1, SHA-256, SHA-512 · 6- and 8-digit codes · 30- and 60-second periods · otpauth:// URI standard · iCloud Drive backup · Encrypted JSON export/import Terms Of Use (EULA): https://leomelegari.github.io/twofac-site/terms Privacy Policy: https://leomelegari.github.io/twofac-site/privacy

Keylet is the privacy-first authenticator that fills your 2FA codes right above the keyboard — without opening the app, and without ever showing a code on screen. From the makers of Authenticator+ — and switching is effortless. Import your accounts in seconds, straight from Authenticator+, Google Authenticator, Authy, Microsoft, 1Password and more — or even from a single screenshot, with no second device needed. Your secrets never leave your phone. Everything lives in an encrypted, zero-knowledge vault (AES-256-GCM) that only you can open. No account. No cloud. No tracking. No ads. WHY KEYLET • AutoFill, done right — tap a verification-code field and Keylet offers the right code. It fills it; it never displays it. Nothing to shoulder-surf. • Import in seconds — from Authenticator+, Google Authenticator, Authy, Microsoft, 1Password, a backup file, or a screenshot. No second device required. • Multiple vaults — keep work and personal completely separate, each encrypted on its own. • Encrypted sharing — hand a code to someone you trust over end-to-end encryption, with a self-destructing expiry. • Backed up, safely — automatic daily encrypted backups on your device, plus password-protected export. No cloud needed. • Yours to organise — biometric lock per account, categories, recovery keys and home-screen widgets. • No ads. Ever. Unlimited accounts, free. Keylet keeps your second factor exactly where it belongs: in your hands, encrypted, and out of sight. Terms of Use (EULA): https://www.apple.com/legal/internet-services/itunes/dev/stdeula/ Privacy Policy: https://studiofifteen.nl/app/keylet/privacy