SecureAuth: Offline 2FA

SecureAuth is a privacy-first, fully offline two-factor authentication (2FA) app and password vault. No cloud. No accounts. No telemetry. No ads. Every secret stays on your device — the app doesn't even request internet permission.

TWO-FACTOR AUTHENTICATION

• TOTP (RFC 6238), HOTP (RFC 4226) and Steam Guard tokens

• SHA-1 / SHA-256 / SHA-512, 4–8 digits, 15–60s periods

• Add accounts by QR scan, from an image, or manually

• Show any account as a QR code to move it to another device

• Live search, drag-to-reorder, next-code preview

PASSWORD VAULT & AUTOFILL

• Store passwords and passkeys in an encrypted local vault

• System-wide autofill via Android Credential Manager

• Biometric-gated access to your credentials

SERIOUS SECURITY

• Argon2id password hashing (Password Hashing Competition winner)

• AES-256 encrypted local database

• Brute-force protection with exponential-backoff lockout

• Optional data wipe after repeated failed attempts

• Auto-lock on inactivity, clipboard auto-clear

• Screenshot blocking & app-switcher privacy

• Clock-tamper detection and a security audit log

BACKUPS YOU CONTROL

• AES-256-GCM + Argon2id encrypted backup files

• Plain JSON export for interoperability

• Import from encrypted or plain backups — all offline

13 LANGUAGES

English, Türkçe, Deutsch, Español, Français, Português, Русский, العربية, Azərbaycanca, 日本語, 한국어, 中文 and more.

100% open source. Your secrets belong to you — SecureAuth just keeps them safe.