2FA Authenticator vs BurnPony Self

Secure your accounts with Autheris — a privacy-first two-factor authentication (2FA) app for iPhone, iPad, Mac and Apple Watch. Autheris generates the time-based one-time passwords (TOTP) that protect your most important accounts, and keeps the secrets behind them on your device. No account, no sign-up, no ads. NOW ON APPLE WATCH • One Code at a Time — Your codes on your wrist, each with a live countdown. Turn the Digital Crown to move between them. • Read-Only by Design — There is no copy, no editing and no settings on the watch. Your iPhone stays the one place codes are managed. • Works Without Your iPhone — Codes are generated on the watch itself, so they keep counting down with your phone out of reach or switched off. KEY FEATURES • One-Tap Codes — Copy a code with a single tap. The clipboard clears itself after 60 seconds. • Pin and Reorder — Pin the codes you use most to the top, and drag the rest into whatever order suits you. • Recently Deleted — Delete a code by mistake? It stays on your device for 7 days, ready to restore. • QR Scanning — Add an account by scanning a QR code, or choose a screenshot from your photo library. • Time-Based and Counter-Based Codes — TOTP for almost every service, and HOTP for the ones that hand you a counter instead, each with SHA-1, SHA-256 or SHA-512 and 6 to 10 digits. If a service rejects your codes, the algorithm is editable per account. • Import — Bring your token generator accounts across from Google Authenticator, Aegis, andOTP or 2FAS. • Search — Find any account instantly, however long your list gets. • Issuer Icons — Familiar brand marks so you can spot an account at a glance. • Countdown Ring — A clear, colour-customisable ring shows how long each verification code has left. PRIVACY AND SECURITY • Face ID / Touch ID Lock — Locks when opened, and again after 30 seconds away. • Blurred When Backgrounded — Content blurs when you switch apps, and your codes are hidden in the app switcher. • Protected While Recording — Codes are covered whenever your screen is being recorded or mirrored. • Secrets Stay on Your Device — Codes and setup keys are kept in your device's Keychain and never leave it unless you export them or turn on iCloud Sync. • Encrypted Backups — Save an AES-256-GCM encrypted backup protected by a password only you know. • Optional iCloud Sync — Off by default. When you enable it, your secrets are end-to-end encrypted by CloudKit, and the developer cannot read them. • No Account, No Tracking — Nothing to sign up for, no analytics, no advertising. Autheris is open source. Install Autheris, add an account, and keep your second factor — and your 2-step login — under your own control.

Write a secret. Share one link. It reads once and burns. BurnPony encrypts your note on your phone before anything is sent. The server stores only ciphertext it cannot read, the decryption key travels in a part of the link that browsers never transmit, and the recipient needs nothing but a browser. No app on their side, no account on yours. WHAT IT DOES One link, any recipient, any device with a browser. View limits from 1 to 100, expiry from 5 minutes to 30 days, an optional auto-hide timer after reveal. Optional passphrase as a second factor, shared through a different channel than the link. Read receipts, honestly: the recipient is told before they open. No silent tracking, ever. Labels that never leave your phone: name a note "wifi password for mom" and the read notification says so, while the server knows nothing. Sent Notes: live status, view counts, change the expiration after sending, burn early with a swipe. The recipient page speaks nine languages, following the reader's browser. WHY YOU CAN CHECK INSTEAD OF TRUST The entire system is open source: this app, the server, and the recipient page, with a written protocol specification and cross-implementation test vectors. The note page is byte-reproducible from its published source, so View Source is a real audit, not a gesture. You can even run your own server and point the app at it from Settings. HONEST LIMITS Self-destruction limits exposure; it cannot un-share. A recipient can always copy or photograph a revealed note, and BurnPony says so on the note page itself, because a privacy tool that overpromises is worse than none. From NorseHorse, maker of PGPony, CarrierPony, AgePony, RelayPony, and QuorumPony.