Authy Authenticator

Authy Authenticator keeps your two-step verification codes, passwords and passkeys in one encrypted vault on your phone. You don't need an account: set a 6-digit PIN or a master password, add fingerprint or face unlock if you like, and your vault stays on this device.

TWO-STEP VERIFICATION CODES

• Scan a setup QR code with the camera or from a screenshot, or type the setup key yourself

• Standard time-based codes (TOTP) with SHA-1, SHA-256 or SHA-512, 6 or 8 digits and custom periods

• Move codes over from Google Authenticator with its export QR codes

• Codes work offline. Copy one with a tap; copied codes and passwords are cleared from the clipboard shortly after

PASSWORDS AND PASSKEYS

• Save logins with website, username, password, notes and backup recovery codes

• Generate strong passwords with the length and characters you choose

• Fill saved passwords in apps and browsers with Android Autofill

• Use saved passwords and passkeys through Android Credential Manager on Android 14 and later

• Import passwords from a Chrome or Google Password Manager CSV export, with a preview before anything is saved

SECURITY CHECK

• See weak and reused passwords at a glance

• Optional breach check: only after you confirm, the first five characters of each password's hash are sent to the Pwned Passwords service. Your passwords never leave your phone

BACKUP AND RECOVERY

• A recovery key lets you reset a forgotten PIN or master password on this device

• Create an encrypted export file, keep it wherever you choose and restore it on a new phone

• Recently deleted items can be restored for 30 days

PRIVATE BY DESIGN

• The vault is encrypted on your device, with its keys protected by Android Keystore

• Screenshots of the app are blocked unless you allow them

• The vault locks itself after the timeout you choose

• No ads, no analytics, no tracking and no in-app purchases

Keep your recovery key somewhere safe. Without it and without an encrypted export, nobody can open a vault whose PIN or master password is lost.