TwoFac vs Authenticator

Your two-factor codes. Private, secure, always available. TwoFac is an offline authenticator that keeps your one-time passwords exactly where they belong — on your device. No account to create, no server to trust, no subscription to manage. Just your codes, ready when you need them. PRIVATE BY DESIGN Every secret is encrypted and stored locally using your device's secure storage. TwoFac has no backend, no analytics, and no data collection of any kind. Your codes never leave your phone unless you explicitly export a backup. SIMPLE TO USE • Scan a QR code to add any TOTP account in seconds • Enter codes manually with full field validation • Copy any token with a single tap • See exactly how long your code is valid with a live countdown • Organize accounts into folders to keep things tidy BACKUP WHEN YOU WANT Export an encrypted backup file protected by a password you choose. Save it to iCloud Drive, share it to Files, or keep it anywhere you like. Restore it on any device running TwoFac. Your backup, your rules. SECURE AT REST • Secrets encrypted with AES-GCM on-device • Optional biometric app lock (Face ID / Touch ID) • Automatic re-lock after a configurable timeout • Screenshot prevention in the app switcher COMPATIBLE WITH EVERYTHING TwoFac works with any service that supports TOTP (RFC 6238): Google, GitHub, Dropbox, Notion, Stripe, Amazon, Cloudflare, Twitter, Discord, and thousands more. FREE. ALWAYS. TwoFac is and will always be free to use. No ads. No in-app purchases. No premium tier. If you find it useful, a small donation keeps the project alive — but there's no obligation whatsoever. SUPPORTS TOTP / RFC 6238 · SHA-1, SHA-256, SHA-512 · 6- and 8-digit codes · 30- and 60-second periods · otpauth:// URI standard · iCloud Drive backup · Encrypted JSON export/import Terms Of Use (EULA): https://leomelegari.github.io/twofac-site/terms Privacy Policy: https://leomelegari.github.io/twofac-site/privacy

This app generates the six-digit codes you need when a service asks for a second step at sign-in. Scan a QR code once, and the code is there whenever you come back. Everything happens on your device. There is no account to create and nothing to sign up for. What it does Generates time-based one-time codes (TOTP) that refresh every thirty seconds. Works with any service that supports authenticator apps — email providers, social networks, cloud storage, developer tools, crypto platforms, work accounts and more. Adding an account takes a few seconds: scan the QR code the service shows you, or type in the setup key by hand if there is no code to scan. Codes work without an internet connection. They are calculated on your phone from the time and the key, so a weak signal or no signal at all makes no difference. You can rename accounts, reorder the list, and remove what you no longer use. If you would rather not leave your codes open on the screen, the app can be locked with Face ID, Touch ID or a passcode. Privacy Policy: https://stratadevstudiolimited.com/pp.html Terms of Use: https://stratadevstudiolimited.com/tt.html