2FA Authenticator vs PassPony

Secure your accounts with Autheris — a privacy-first two-factor authentication (2FA) app for iPhone, iPad, Mac and Apple Watch. Autheris generates the time-based one-time passwords (TOTP) that protect your most important accounts, and keeps the secrets behind them on your device. No account, no sign-up, no ads. NOW ON APPLE WATCH • One Code at a Time — Your codes on your wrist, each with a live countdown. Turn the Digital Crown to move between them. • Read-Only by Design — There is no copy, no editing and no settings on the watch. Your iPhone stays the one place codes are managed. • Works Without Your iPhone — Codes are generated on the watch itself, so they keep counting down with your phone out of reach or switched off. KEY FEATURES • One-Tap Codes — Copy a code with a single tap. The clipboard clears itself after 60 seconds. • Pin and Reorder — Pin the codes you use most to the top, and drag the rest into whatever order suits you. • Folders — Sort your tokens into colour-coded folders and filter your list with a tap. Off until you turn it on in Settings. • Recently Deleted — Delete a code by mistake? It stays on your device for 7 days, ready to restore. • QR Scanning — Add an account by scanning a QR code, or choose a screenshot from your photo library. • Time-Based and Counter-Based Codes — TOTP for almost every service, and HOTP for the ones that hand you a counter instead, each with SHA-1, SHA-256 or SHA-512 and 6 to 10 digits. If a service rejects your codes, the algorithm is editable per account. • Import — Bring your token generator accounts across from Google Authenticator, Aegis, andOTP or 2FAS. • Search — Find any account instantly, however long your list gets. • Issuer Icons — Familiar brand marks so you can spot an account at a glance. • Countdown Ring — A clear, colour-customisable ring shows how long each verification code has left. PRIVACY AND SECURITY • Face ID / Touch ID Lock — Locks when opened, and again after 30 seconds away. • Blurred When Backgrounded — Content blurs when you switch apps, and your codes are hidden in the app switcher. • Protected While Recording — Codes are covered whenever your screen is being recorded or mirrored. • Secrets Stay on Your Device — Codes and setup keys are kept in your device's Keychain and never leave it unless you export them or turn on iCloud Sync. • Encrypted Backups — Save an AES-256-GCM encrypted backup protected by a password only you know. • Optional iCloud Sync — Off by default. When you enable it, your secrets are end-to-end encrypted by CloudKit, and the developer cannot read them. • No Account, No Tracking — Nothing to sign up for, no analytics, no advertising. Autheris is open source. Install Autheris, add an account, and keep your second factor — and your 2-step login — under your own control.

PassPony is a password manager for people who want to own their passwords. Every entry is one encrypted file in a store you control, in the same format as the pass and passage command line tools. Your Mac, your server, and your phone can all work on the same store. WHY A FILE-BASED STORE One entry, one file: the password on the first line, anything else after it. Encrypted with your keys: age identities for passage stores, OpenPGP keys for pass stores. Synced with git over HTTPS or SSH: clone your existing store, publish a new one, and resolve conflicts per entry, never with a silent merge. Interoperable: commits match the pass CLI format, so the store stays fully usable from the desktop tools. EVERYDAY USE AutoFill: your passwords appear above the keyboard when you sign in. Only entry names are indexed; nothing decrypts until you fill. Passkeys: save a passkey for a site and sign in with it. It lives in that site's entry, encrypted with your keys, and syncs like everything else. One-time codes: TOTP with a countdown ring, HOTP counters, and import from an authenticator app's export QR codes. Face ID or Touch ID unlock, with a five-minute grace window shared with AutoFill. Ephemeral clipboard: copies are local only and clear after 45 seconds. Field-level editing that preserves the exact bytes of lines it does not touch. YOUR KEYS STAY YOURS Back up every key on your phone to one file locked with a recovery code, and restore it on a new phone. SSH sync uses a key made on your phone or imported; hosts are trusted on first use and a changed host key is refused. Phones that share a store each add their own public key to it when they sync, and you approve every new key before your entries are re-encrypted for it. Secret keys never leave a device. PRIVATE BY ARCHITECTURE No account, no signup, no PassPony server. The only network connection is the git remote you configure. No analytics, no ads, no tracking. Open source, Apache-2.0. The full app and its Rust core are published in a public git repository for anyone to audit. FORMATS passage stores encrypt with modern age identities. pass stores encrypt with OpenPGP keys (Cv25519 and X25519/Ed25519 in software). RSA-keyed stores need a smartcard, which is not supported yet. Each format keeps its own store; switching never touches the other. Localized in English, Spanish, French, German, Simplified Chinese, Brazilian Portuguese, and Russian. If you already run pass or passage, PassPony is the missing phone half of your setup. If you have never used them, the first-run tour will have you adding your first pass in about a minute.