Comparison of OTP applications
The following is a general comparison of OTP applications that are used to generate one-time passwords for two-factor authentication (2FA) systems using the time-based one-time password (TOTP), the HMAC-based one-time password (HOTP) algorithms or Mobile-OTP (mOTP)[1], which is an older, open source, 2FA system for mobile phones that combines a user’s PIN, time and a per-device secret to generate OTPs. It also lists apps that support proprietary authentication methods, like those used by Steam or Yandex.
Summary information
Standalone authenticator applications
The following is an overview of authenticator applications that operate independently and are not integrated into password managers.
Name | License | Operating system support | Browser integration | Delivery format |
---|---|---|---|---|
2FAS[2] | Open source | Android, iOS, iPadOS, watchOS | Yes, autofill via browser extension connected to mobile app | Local installation with sync via iCloud or Google Drive |
2FAuth[3] | Open source | Cross-platform web application | No | Local installation |
2fast[4] | Open source | Windows | Unknown | Local installation |
Aegis Authenticator[5] | Open source | Android | Unknown | Local installation with cloud sync |
andOTP[6] (unmaintained)[7] | Open source | Android, iOS, Linux, macOS, Windows | Unknown | Local installation with cloud sync |
Authenticator App by 2Stable[8] | Proprietary / Freemium | iOS, iPadOS, macOS, watchOS, browser extension for Chrome, Edge, Firefox and more | Unknown | Local installation |
Authy | Proprietary / Freeware | Android, iOS, iPadOS, watchOS. Dropped support for Linux, Mac and Windows | Unknown | Local installation |
Bitwarden Authenticator | Open source | Android, iOS, iPadOS, visionOS | Unknown | Local installation with backup via iCloud or Google Drive |
Authenticator[9] | GPL-3.0-or-later | Linux | Unknown | Local installation |
Duo Mobile[10] | Proprietary / Freeware | Android, iOS, iPadOS, watchOS | Unknown | Local installation |
Ente Auth | AGPL-3.0 | Android, iOS, iPadOS, Linux, macOS, Windows | Unknown | Local installation with cloud sync |
FreeOTP[11] | Open source | Android, iOS, iPadOS | Unknown | Local installation |
GAuth Authenticator[12] | GPL | Web based app | No | Local installation or hosted web application |
Google Authenticator | Proprietary freeware | Android, iOS, iPadOS, Blackberry, Wear OS | Unknown | Local installation with cloud sync |
Hotpants[13] | GPL-2.0 | J2ME | Unknown | Local installation |
IBM Verify | Proprietary freeware | Android, iOS, iPadOS | Unknown | Local installation |
LastPass Authenticator [14] | Proprietary | Android, iOS, iPadOS, watchOS | Yes, autofill via browser extension connected to mobile app | Local installation with cloud sync |
Microsoft Authenticator | Proprietary | Android, iOS, iPadOS, visionOS | No | Local installation with cloud sync |
oathtool [15]
|
Open source | Linux | Unknown | Local installation |
Open Authenticator[16] | Open source | Android, iOS, iPadOS, Linux, macOS, Windows | Unknown | Local installation |
Proton Authenticator [17] | GPL-3.0-or-later | Android, iOS, macOS, Windows, Linux | Unknown | Local installation with cloud sync |
SAASPASS Authenticator [18] | Proprietary | Android, iOS, iPadOS, watchOS, macOS | No | Local installation with cloud sync |
Stratum[19] | GPL-3.0 | Android, Wear OS | Unknown | Local installation with cloud sync |
Symantec VIP | Proprietary | Android, iOS, watchOS, macOS, Windows | Unknown | Local installation |
Tessera[20] | Open source | Symbian S60 5th Edition, initial support for desktop | Unknown | Local installation |
TOTP ME[21] | Open source | J2ME | Unknown | Local installation |
TOTP.APP[22] | Open source | Cross-platform web application | Unknown | Web-based |
Yandex Key[23] | Proprietary | Android, iOS, iPadOS | Unknown | Local installation |
Yubico Authenticator for Desktop[24] | Proprietary | Linux, macOS, Windows | Unknown | Local installation |
Yubico Authenticator for Mobile | Proprietary | Android, iOS | Unknown | Local installation |
Combined authenticator and password manager applications
The following is an overview of password managers that include an integrated authenticator feature.
Authenticated implementations
Implementation | Description | Online sync. | Operating system / Platform | Default | Non-default | Import methods | Export methods | |||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Windows | Mac | Linux | iOS | Android | Other | HOTP | Value length, d | Hash, H | Interval, TX | Epoch, T0 | Other: Steam or mOTP | QR | JSON | QR | JSON | |||
1Password | Cross-platform password manager[29] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | No | Unknown | Unknown | Unknown | Unknown | ||||
2FAS[2] | Popular, feature rich open-source two-factor authenticator. No account required. | Online backup/sync via iCloud or Google Drive | Through browser extension connected to mobile app | Yes | Yes | No | Yes | Yes | Yes | Yes | No | No | Yes | Yes | No | Yes | ||
2FAuth[3] | An open-source PHP web based self-hosted OTP generator, designed for both mobile and desktop. | Yes, web based | No | Unknown | Yes | Yes | Yes | No | Steam | |||||||||
2fast[4] | Open-source two-factor authenticator. No account required. Available in Windows App Store. | No | Yes | No | No | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Aegis Authenticator | Free and open source app for Android to manage your 2-step verification tokens.[5] | Automatic backup to a location of your choosing | No | No | No | No | Yes | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | Yes | Yes | Yes |
andOTP[6] (unmaintained - json file handled by Aegis)[7] | Open-source app for Android 4.4+. Compatible with Google Authenticator. | No | No | No | No | No | Yes | No | Unknown | No | No | Yes | No | No | Yes | Yes | ||
Apple Keychain | Native password manager on Apple devices. Not on tvOS.[30] | Yes [31] | Yes [32] | Yes | No | Yes | No | Apple Vision Pro | Unknown | Yes | Yes | Yes | Unknown | Unknown | Yes | The Setup URL (otpauth://) can be manually copied for each item from the edit screen of the Passwords app | ||
Authenticator[9] | GNOME circle application. Free and Open Source, community-provided, but not shipped as part of GNOME's Core apps | No | No | No | Yes | No | No | Any desktop or mobile platform where GNOME can run | Yes | Yes | Yes | Yes | Yes | Steam | Yes | Yes | Yes | Yes |
Authenticator App by 2Stable[8] | Secure two-factor authentication app for iPhone, iPad, iPod, Apple Watch and Mac. Freemium app with max 2 accounts in the free version.[33] | Yes | No | Yes | No | Yes | No | No | Unknown | Yes | Yes | Yes | Unknown | No | ||||
Authy | By Twilio, from 2015, originally Authy.[34] Previously available for Chrome.[35] | Yes | Discontinued March 19, 2024[36] | Yes | Yes | No | Unknown | Yes | No | No | No | No | ||||||
Bitwarden | Open Source Cross platform password manager. 2FA is a premium feature.[37] | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | Yes | Yes | Unknown | Steam[38] | Yes | Yes | No | Yes |
Bitwarden Authenticator | Free and open source app for Android and iOS to manage your 2-step verification tokens.[39] | No | No | No | No | Yes | Yes | No | Unknown | No | No | No | No | No | ||||
Duo Mobile[10] | Free 2FA authenticator provided by Cisco | Yes, through iCloud or Google Drive | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | No | ||||
Enpass[40] | Password manager by Sinew Software Systems. Syncs over multiple back-ends. | Yes | Yes | Yes | Yes | Yes | Yes | No | Unknown | Yes | No | Yes | Unknown | No | Yes | |||
Ente Auth | Free, open source, cross-platform authenticatior with encrypted cloud sync.[41] | Yes | Yes | Yes | Yes | Yes | Yes | Web | Unknown | Unknown | Unknown | Unknown | Unknown | Steam [42] | ||||
FreeOTP[11] | Maintained by RedHat, and based on Google Authenticator. | No | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | ||||
GAuth Authenticator[12] | A simple application for multi-factor authentication, written in HTML using jQuery Mobile (and PhoneGap), jsSHA and LocalStorage. | Unknown | Yes | Yes | Yes | No | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Google Authenticator | Yes | No | No | No | Yes | Yes | No | Yes | No | No | No | No | No | Yes | No | Yes | No | |
Hotpants[13] | Free, open-source J2ME MIDlet app to manage your TOTPs and HOTPs. | Import via scanning QR code on screen | No | No | No | No | No | J2ME | Yes | Unknown | Unknown | Unknown | Unknown | No | ||||
IBM Security Verify | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Yes | Unknown | Unknown | |||||
Invantive Authenticator[43] | Focuses on integration with Invantive Keychain. | No | Yes | No | No | No | No | No | Unknown | Yes | Yes | Yes | Yes | No | ||||
KeePassXC[44] | Password manager | Through user setup with Syncthing,[45] or only within the KeeWeb[46] online web App[47] | Yes | Yes | Yes | No | KeePassDX[48] | No | Unknown | Yes | Yes | Yes | No | Steam | Yes | |||
LastPass Authenticator [14] | Cross-platform OTP for mobile devices with support for online backup. | Yes | No | No | No | Yes | Yes | No | Unknown | Yes | Yes | Yes | No | No | Yes | |||
Microsoft Authenticator | Yes | No | No | No | Yes | Yes | No | No | No | No | No | No | No | No | No | No | No | |
oathtool [15]
|
Command-line tool for generating OTP tokens. | No | No | No | Yes | No | No | FreeBSD,[49] NetBSD,[50] OpenBSD[51] | Unknown | Yes | Yes | Yes | Yes | Unknown | ||||
Open Authenticator[16] | Free, open-source and multiplatform app to manage your TOTPs. | Yes, requires a subscription for more than 6 TOTPs | Yes | Yes | No | Yes | Yes | No | No | Yes | Yes | Yes | No | No | ||||
privacyIDEA Authenticator[52] | For use with privacyIDEA Authentication Server, with a secure enrollment process. | No | No | No | No | Yes | Yes | No | No | Yes | Yes | Yes | No | Unknown | ||||
Proton Authenticator[17] | Open source and available on every device. Securely sync and backup 2FA codes easily. No account required. | Yes, via a Proton Account, or via iCloud on Apple devices | Yes | Yes | Yes | Yes | Yes | No | No | Yes | Yes | Yes | No | Steam | No | Yes | No | Yes |
SAASPASS Authenticator [18] | Cross-platform 2FA Authenticator with TOTP & HOTP generator with sharing capabilities and password manager integration. Multiple device support, Mobile app and web access with multiple backup capabilities. | Yes | Yes | Yes | Yes | Yes | Yes | No | Yes | Yes | Yes | Yes | Yes | Steam | ||||
Stratum[19] | Free and open-source two-factor authentication app for Android | Unknown | No | No | No | No | Yes | WearOS | Yes | Unknown | Unknown | Unknown | Unknown | Steam & mOTP | ||||
Symantec VIP | Unknown | No | No | No | Yes | Yes | No | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | |||||
Tessera[20] | Free, open-source Qt for Symbian and desktop app to manage your TOTPs. | Unknown | Initial support for desktop | No | Could be ported | Symbian S60 5th Edition | Unknown | Unknown | Unknown | Unknown | Unknown | Unknown | ||||||
TOTP ME[21] | Free, open-source J2ME MIDlet app to manage your TOTPs. | Manually | Using MicroEmulator app[53] | Unknown | Using J2ME Loader app[54] | J2ME or any with J2ME support or emulator | Unknown | Yes | Yes | Yes | Time correction in seconds | No | ||||||
TOTP.APP[22] | Web-based authenticator not requiring registration. | No | Yes | Yes | Yes | Yes | Yes | No | No | No | No | No | No | No | ||||
Yandex Key[23] | Simple app for phones from Russian company | Yes, manually, for 1 year | No | No | No | Yes | Yes | No | No | Unknown | Unknown | Unknown | Unknown | Unknown | ||||
Yubico Authenticator for Desktop[24] | By Yubico, for use with Yubikeys. | No | Yes | Yes | Yes | — | — | No | No | Yes | Yes | Yes | No | No | ||||
Yubico Authenticator for Mobile | — | — | — | Yes | Yes |
See also
References
- ^ "Mobile-OTP: Strong Two-Factor Authentication with Mobile Phones". Mobile-OTP. 15 December 2003. Retrieved 11 September 2025.
- ^ a b "2FA Authenticator App (2FAS)". 2FAS. Retrieved 12 March 2023.
- ^ a b "GitHub - Bubka/2FAuth: A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes". GitHub. Bubka. Retrieved 19 March 2023.
- ^ a b "2fast Authenticator App (2fast)". 2fast-team. Retrieved 14 November 2024.
- ^ a b "Aegis Authenticator - Secure 2FA app for Android". Aegis Authenticator. Retrieved 29 April 2023.
- ^ a b "andOTP/andOTP". GitHub.
- ^ a b flocke (15 July 2017). "[Unmaintained][App][4.4+][Open source] andOTP - Open source two-factor authentication for Android". XDA Forums. Retrieved 12 March 2023.
- ^ a b "Authenticator App by 2Stable". Retrieved 6 November 2024.
- ^ a b "Authenticator – Apps for GNOME". Gnome Circle. Retrieved 10 September 2025.
- ^ a b "Third-Party Accounts - Guide to Duo Authentication". Duo. Retrieved 11 August 2025.
- ^ a b "FreeOTP". freeotp.github.io.
- ^ a b Gerard Braad. "gauth.apps.gbraad.nl". Retrieved 16 September 2024.
- ^ a b Matti (4 August 2024), baumschubser/hotpants, retrieved 12 August 2024
- ^ a b "LastPass - LastPass Authenticator". lastpass.com. Retrieved 7 September 2018.
- ^ a b "OATH Toolkit". www.nongnu.org. Retrieved 7 September 2018.
- ^ a b "Open Authenticator : Secure your online accounts with a free, open-source and lovely-crafted app". Skyost. Retrieved 22 July 2024.
- ^ a b "Proton Authenticator: Private, secure 2FA authenticator | Proton". Proton. Retrieved 9 September 2025.
- ^ a b "The 5 Best Two-Factor Authentication Apps for iPhone & Android". Gadget Hacks. 28 February 2020. Retrieved 28 February 2020.
- ^ a b "Open-source two-factor authentication app - Stratum". Stratum. Retrieved 10 September 2025.
- ^ a b Janiszewski, Maciej (10 April 2024), ksiazkowicz/Tessera, retrieved 12 August 2024
- ^ a b Cacek, Josef (14 April 2024), kwart/totp-me, retrieved 12 August 2024
- ^ a b "Online one-time password generator / TOTP (Google Authenticator) Online". totp.app. Retrieved 7 September 2018.
- ^ a b "Yandex Key - Yandex ID. Help". yandex.com. Retrieved 28 May 2024.
- ^ a b "Using Your YubiKey with Authenticator Codes : Yubico Support". support.yubico.com. Archived from the original on 2 October 2018. Retrieved 11 March 2023.
- ^ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 8 May 2023.
- ^ "iCloud Passwords – Get this Extension for 🦊 Firefox (en-GB)". Add-ons for Firefox. Retrieved 10 September 2025.
- ^ "iCloud Passwords - Chrome Web Store". Chrome Web Store. Retrieved 10 September 2025.
- ^ "iCloud Passwords - Microsoft Edge Addons". Microsoft Edge Addons. Retrieved 10 September 2025.
- ^ "Use 1Password as an authenticator for sites with two-factor authentication". 1Password. Retrieved 7 September 2018.
- ^ "Sending passwords to other users or Apple devices". Apple Support. 18 February 2021. Retrieved 23 August 2024.
- ^ "Set up iCloud Keychain". Apple Support. 5 August 2024. Archived from the original on 6 August 2024. Retrieved 23 August 2024.
- ^ "Set up iCloud Passwords on your Windows computer — in: iCloud for Windows User Guide". Apple Support. Retrieved 23 August 2024.
- ^ "Pricing - Free vs Premium | Authenticator App". Retrieved 29 May 2025.
- ^ Lardinois, Frederic (24 February 2015). "Twilio Acquires Two-Factor Authentication Service Authy". TechCrunch. Retrieved 5 March 2018.
- ^ "Authy for Chrome App & Extension End of Life". Authy Support. Retrieved 14 February 2024.
- ^ "Business customer guide: End of Life (EOL) for use of Authy API with Twilio Authy Desktop apps". Authy Support. Retrieved 14 February 2024.
- ^ "Pricing for Individuals and Families | Bitwarden". Bitwarden. Retrieved 23 March 2023.
- ^ "Steam Guard TOTPs". Bitwarden. Retrieved 23 March 2023.
- ^ "Bitwarden just launched a new authenticator app. Here's what it means to users. | Bitwarden Blog". Bitwarden.
- ^ "Best password manager for iOS, Android, Windows, Linux, Mac | Enpass". www.enpass.io. Retrieved 7 September 2018.
- ^ "Ente Auth - Open source 2FA authenticator, with E2EE backups". Ente. Retrieved 16 October 2024.
- ^ "Migrating from Steam Authenticator". Ente. Retrieved 16 October 2024.
- ^ B.V., Invantive Software. "Invantive Authenticator". two-step-verification.solutions. Retrieved 7 September 2018.
- ^ Team, KeePassXC. "KeePassXC 2.2.0 released - KeePassXC". keepassxc.org.
- ^ "KeePassXC + KeePassDX (Android) Sync guide. A complete starting guide for new users". reddit.com. 10 September 2021. Retrieved 7 July 2023.
- ^ "Free Password Manager Compatible with KeePass: KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeeWeb". keeweb.info. Retrieved 7 July 2023.
- ^ "KeePassDX". keepassdx.com. Retrieved 7 July 2023.
- ^ "FreshPorts -- security/oath-toolkit: Library, tools, and PAM module for OATH authentication". FreeBSD Ports.
- ^ "security/oath-toolkit - The NetBSD Packages Collection".
- ^ "ports/security/oath-toolkit/".
- ^ "privacyIDEA Authenticator". GitHub. Retrieved 7 September 2018.
- ^ "totp-me - TOTP for Java ME - Google authenticator". SourceForge.
- ^ Shakarun, Nikita, nikita36078/J2ME-Loader