TwoFac vs Vaultic

Your two-factor codes. Private, secure, always available. TwoFac is an offline authenticator that keeps your one-time passwords exactly where they belong — on your device. No account to create, no server to trust, no subscription to manage. Just your codes, ready when you need them. PRIVATE BY DESIGN Every secret is encrypted and stored locally using your device's secure storage. TwoFac has no backend, no analytics, and no data collection of any kind. Your codes never leave your phone unless you explicitly export a backup. SIMPLE TO USE • Scan a QR code to add any TOTP account in seconds • Enter codes manually with full field validation • Copy any token with a single tap • See exactly how long your code is valid with a live countdown • Organize accounts into folders to keep things tidy BACKUP WHEN YOU WANT Export an encrypted backup file protected by a password you choose. Save it to iCloud Drive, share it to Files, or keep it anywhere you like. Restore it on any device running TwoFac. Your backup, your rules. SECURE AT REST • Secrets encrypted with AES-GCM on-device • Optional biometric app lock (Face ID / Touch ID) • Automatic re-lock after a configurable timeout • Screenshot prevention in the app switcher COMPATIBLE WITH EVERYTHING TwoFac works with any service that supports TOTP (RFC 6238): Google, GitHub, Dropbox, Notion, Stripe, Amazon, Cloudflare, Twitter, Discord, and thousands more. FREE. ALWAYS. TwoFac is and will always be free to use. No ads. No in-app purchases. No premium tier. If you find it useful, a small donation keeps the project alive — but there's no obligation whatsoever. SUPPORTS TOTP / RFC 6238 · SHA-1, SHA-256, SHA-512 · 6- and 8-digit codes · 30- and 60-second periods · otpauth:// URI standard · iCloud Drive backup · Encrypted JSON export/import Terms Of Use (EULA): https://leomelegari.github.io/twofac-site/terms Privacy Policy: https://leomelegari.github.io/twofac-site/privacy

Vaultic keeps your two-factor codes, your passwords and your browsing on your iPhone — not in somebody else's cloud. No account to create, no sync to trust, and no secret that ever leaves the device. WHY THIS MATTERS Your 2FA secrets are the last thing standing between an attacker and your accounts. Vaultic stores them in the iOS Keychain under hardware encryption and never uploads them. There is no Vaultic account and no Vaultic server holding your data, so there is nothing to breach and nothing to leak. CODES THAT JUST WORK • Standard TOTP and HOTP — compatible with thousands of services that support authenticator apps • A countdown ring on every card that turns amber before the code expires, so you never submit a code that is about to die • Tap a code to copy it; the clipboard clears itself afterwards • Search instantly by service name or login • Add accounts three ways: scan a QR code, pick the service from the built-in catalog, or type the setup key by hand • Codes are generated from your device clock, so they work in airplane mode, abroad, and with no signal at all A BROWSER THAT FORGETS Open a link or sign in to a service without leaving a trail. Cookies, cache and history are held in memory and never written to disk, so ending the session removes them for good. Searches go to DuckDuckGo rather than an advertising network, addresses are upgraded to HTTPS, and the browser sits behind the same Face ID lock as everything else. It is a private browser, not a VPN — the sites you visit still see your connection. LOCKED DOWN BY DEFAULT • Face ID or Touch ID, with a PIN as a fallback • Auto-lock the moment you leave the app • A privacy shade hides your codes in the app switcher, whether or not you use a lock • Content is covered while the screen is being recorded, mirrored or shared • A warning when a screenshot is taken, because iOS lets no app prevent one • Optionally keep every code hidden until you deliberately tap it • Five wrong PIN attempts trigger a cooldown PASSWORDS IN THE SAME VAULT Keep logins next to your codes instead of scattering them across apps. Generate strong passwords from a real cryptographic random source, exclude look-alike characters when you will have to type the password by hand, and see how strong it is before you save. BACKUPS YOU CONTROL Export an encrypted backup locked with a password you choose. The file is protected with AES-GCM and a key derived through 210,000 rounds of PBKDF2, so a stolen backup is useless without your password. Restore it on a new iPhone in seconds, or open a backup file straight from the Files app. IF YOU LOSE YOUR PHONE Read this before you need it. Because Vaultic keeps nothing on a server, a backup you made earlier is the only way back — along with the recovery codes the services themselves gave you. Nobody, including us, can restore your codes without it. Make a backup today and store its password somewhere safe. BUILT FOR IPHONE A calm dark interface, full Dynamic Type support, and complete VoiceOver labelling — codes are read out digit by digit rather than as one large number. Available in English and Russian. FREE AND PREMIUM Vaultic is free for up to 3 accounts, with every security feature included. Premium removes the account limit and supports continued development. Restoring a backup is never limited: your own data always comes back, subscription or not. Premium is an auto-renewable subscription. Payment is charged to your Apple ID at confirmation of purchase. It renews automatically unless cancelled at least 24 hours before the end of the current period, and you can manage or cancel it any time in App Store settings. If a free trial is offered, any unused portion is forfeited when you buy a subscription. Terms of use: https://fronder.github.io/vaultic-app/terms/ Privacy policy: https://fronder.github.io/vaultic-app/privacy/