2FA Authenticator vs BurnPony

Secure your accounts with Autheris — a privacy-first two-factor authentication (2FA) app for iPhone, iPad, Mac and Apple Watch. Autheris generates the time-based one-time passwords (TOTP) that protect your most important accounts, and keeps the secrets behind them on your device. No account, no sign-up, no ads. NOW ON APPLE WATCH • One Code at a Time — Your codes on your wrist, each with a live countdown. Turn the Digital Crown to move between them. • Read-Only by Design — There is no copy, no editing and no settings on the watch. Your iPhone stays the one place codes are managed. • Works Without Your iPhone — Codes are generated on the watch itself, so they keep counting down with your phone out of reach or switched off. KEY FEATURES • One-Tap Codes — Copy a code with a single tap. The clipboard clears itself after 60 seconds. • Pin and Reorder — Pin the codes you use most to the top, and drag the rest into whatever order suits you. • Folders — Sort your tokens into colour-coded folders and filter your list with a tap. Off until you turn it on in Settings. • Recently Deleted — Delete a code by mistake? It stays on your device for 7 days, ready to restore. • QR Scanning — Add an account by scanning a QR code, or choose a screenshot from your photo library. • Time-Based and Counter-Based Codes — TOTP for almost every service, and HOTP for the ones that hand you a counter instead, each with SHA-1, SHA-256 or SHA-512 and 6 to 10 digits. If a service rejects your codes, the algorithm is editable per account. • Import — Bring your token generator accounts across from Google Authenticator, Aegis, andOTP or 2FAS. • Search — Find any account instantly, however long your list gets. • Issuer Icons — Familiar brand marks so you can spot an account at a glance. • Countdown Ring — A clear, colour-customisable ring shows how long each verification code has left. PRIVACY AND SECURITY • Face ID / Touch ID Lock — Locks when opened, and again after 30 seconds away. • Blurred When Backgrounded — Content blurs when you switch apps, and your codes are hidden in the app switcher. • Protected While Recording — Codes are covered whenever your screen is being recorded or mirrored. • Secrets Stay on Your Device — Codes and setup keys are kept in your device's Keychain and never leave it unless you export them or turn on iCloud Sync. • Encrypted Backups — Save an AES-256-GCM encrypted backup protected by a password only you know. • Optional iCloud Sync — Off by default. When you enable it, your secrets are end-to-end encrypted by CloudKit, and the developer cannot read them. • No Account, No Tracking — Nothing to sign up for, no analytics, no advertising. Autheris is open source. Install Autheris, add an account, and keep your second factor — and your 2-step login — under your own control.

Send a secret without making the other person install anything. Write a note, set the self-destruct rules, share one link. The note is encrypted on your iPhone with AES-256-GCM before anything is uploaded, and it decrypts only in the recipient's browser. The decryption key travels in the part of the link after the #, which browsers never send to any server, so the server stores ciphertext it cannot read, plus a note ID, a view count, and an expiry. No accounts, no names, no analytics. THREE KINDS OF NOTE • Simple: one note, one link, optional passphrase • Double bottom: one link with separate compartments, each opened by its own passphrase. Hand over one passphrase and only that compartment shows; nobody can prove the others exist • Split key: the note opens only when enough key links are combined, for example any 2 of 3 WHAT YOU CONTROL • Views: burn after 1 reading, or allow up to 100 • Expiry: 5 minutes to 30 days, changeable later, counted from now • Scheduled opening: the note stays hidden, looking like it does not exist, until the time you pick • Optional passphrase, stretched with PBKDF2 and mixed into the key. Send it through a different channel than the link • Open immediately: skip the confirmation screen when a note should open on the first visit • Auto-hide: the revealed note re-hides after a timer • Read receipts, disclosed to the recipient before they reveal the note. BurnPony does not do silent read tracking • Defaults for new notes, set once in Settings • A private label for your own list; it never leaves your device • QR code for in-person handoff: the whole link, key included, transfers with no network at all SAVED COPIES (OPTIONAL, OFF BY DEFAULT) Keep a copy of a note you send so you can reread it after it burns. You choose per note. Each copy is encrypted to a key held in the Secure Enclave, which only uses it after Face ID, Touch ID or your passcode. Double bottom notes are never saved. HONEST LIMITS Whoever has the full link (and passphrase, if set) can read the note. A recipient can always copy or photograph a note while it is visible. Self-destruction limits future access; it does not control the moment of reading. OPEN The app, the server, the viewer, and the wire-format specification are open source (Apache-2.0), with cross-implementation test vectors. Self-hosters can point the app at their own server from Settings. Protocol: https://burnpony.app/protocol BurnPony is part of the pony family of privacy tools: encryption you can inspect instead of taking a developer's word for it.