TwoFac vs 2FA iAtomos

Your two-factor codes. Private, secure, always available. TwoFac is an offline authenticator that keeps your one-time passwords exactly where they belong — on your device. No account to create, no server to trust, no subscription to manage. Just your codes, ready when you need them. PRIVATE BY DESIGN Every secret is encrypted and stored locally using your device's secure storage. TwoFac has no backend, no analytics, and no data collection of any kind. Your codes never leave your phone unless you explicitly export a backup. SIMPLE TO USE • Scan a QR code to add any TOTP account in seconds • Enter codes manually with full field validation • Copy any token with a single tap • See exactly how long your code is valid with a live countdown • Organize accounts into folders to keep things tidy BACKUP WHEN YOU WANT Export an encrypted backup file protected by a password you choose. Save it to iCloud Drive, share it to Files, or keep it anywhere you like. Restore it on any device running TwoFac. Your backup, your rules. SECURE AT REST • Secrets encrypted with AES-GCM on-device • Optional biometric app lock (Face ID / Touch ID) • Automatic re-lock after a configurable timeout • Screenshot prevention in the app switcher COMPATIBLE WITH EVERYTHING TwoFac works with any service that supports TOTP (RFC 6238): Google, GitHub, Dropbox, Notion, Stripe, Amazon, Cloudflare, Twitter, Discord, and thousands more. FREE. ALWAYS. TwoFac is and will always be free to use. No ads. No in-app purchases. No premium tier. If you find it useful, a small donation keeps the project alive — but there's no obligation whatsoever. SUPPORTS TOTP / RFC 6238 · SHA-1, SHA-256, SHA-512 · 6- and 8-digit codes · 30- and 60-second periods · otpauth:// URI standard · iCloud Drive backup · Encrypted JSON export/import Terms Of Use (EULA): https://leomelegari.github.io/twofac-site/terms Privacy Policy: https://leomelegari.github.io/twofac-site/privacy

FREE FOREVER 2FA iAtomos is free forever. There is no subscription, no advertising and nothing to buy inside the app. Codes follow the open TOTP standard, and the optional cloud copy is encrypted on the phone before upload. You can import accounts from Google Authenticator, Authy, 2FAS and Aegis. About five seconds before a code changes, the app can warn you. 2FA iAtomos generates your two-factor codes on the phone itself. No account, no connection, no tracking. Your 2FA secrets live in a vault encrypted on the device with AES-256-GCM. The key is held by the iOS Keychain. Nothing leaves the phone unless you decide it should. CLOUD BACKUP, NO PASSWORD TO REMEMBER Sign in and your accounts are saved automatically. Every change is encrypted on your device with AES-256-GCM before upload, with a key that lives only in your iCloud Keychain. On your next iPhone or iPad with the same Apple ID, your accounts appear on their own. A green cloud on the home screen tells you everything is saved. The server only ever receives encrypted data. Restoring merges accounts and never deletes what you already have, and an altered copy or a version conflict leaves your local vault untouched. You can switch the backup off at any time and it is deleted from the server. AN INDEPENDENT ENCRYPTED FILE Export a password-protected file whenever you like. It does not depend on the cloud backup or on any account, so you always have a second way back. WHAT IT DOES • Standard 2FA codes (TOTP, RFC 6238) with SHA-1, SHA-256 and SHA-512, 6 or 8 digits • Scan a QR code, import a Google Authenticator export, or type the secret • Face ID or Touch ID lock, with the device passcode as fallback • Favorites, search and a custom order • The service's own period is respected, never stretched to buy time • English, Spanish, Catalan, German, French, Italian, Portuguese, Japanese, Korean, Chinese (Simplified) and Russian BUILT FOR EVERYONE The app follows your iOS accessibility settings rather than fighting them. Larger Text grows the code instead of shrinking it, Increase Contrast switches to a high-contrast palette, Reduce Motion stops the countdown animating, and Bold Text and Smart Invert are honored. With VoiceOver, every code can be read out digit by digit and copied, starred or deleted through rotor actions. Time remaining is available on demand, so nothing interrupts you mid-code. Urgency is never signaled by color alone. WHAT IT DOES NOT DO • No ads • No data selling • No behavioral tracking • No secrets, account names or generated codes in any log or report The optional account lets you sign in with Apple, Google or your email. Those services process account identifiers and diagnostic data, and the privacy policy says exactly which and when. The security model is written down, not implied. Read the privacy policy and its security limits at 2fa.iatomos.com.